CVE-2024-25808

Published March 22nd, 2024

View on NVD ↗

CVSS v3

8.3

HIGH

CVSS v2

N/A

Affected

1

PROJECT

Description

Cross-site Request Forgery (CSRF) vulnerability in Lychee version 3.1.6, allows remote attackers to execute arbitrary code via the create new album function.

GitHub

3