Liman 0.7 - Cross-Site Request Forgery (Change Password) | Advisories

Advisories

Liman 0.7 - Cross-Site Request Forgery (Change Password)

severity: none
date: January 29, 2026
Affecting: Liman 0.7
CVE: CVE-2020-37007
CWE: CWE-565 Reliance on Cookies without Validation and Integrity Checking
CVSS: 0
CVSS V4 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
References: ExploitDB-48869
Archived Liman GitHub Repository
Credit: George Tsimpidas
Description: Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting unauthorized requests.