CVE-2020-37007

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting unauthorized requests.

Score

CVSS 3.1 5.3 Medium

Status

Modified - disclosure@vulncheck.com

Published

2026-01-29

Last modified

2026-03-05

Weaknesses

CWE-352

Affected products

• Liman (Salihciftci)

References

• https://web.archive.org/web/20201109042653/https://github.com/salihciftci/liman
• https://www.exploit-db.com/exploits/48869
• https://www.vulncheck.com/advisories/liman-cross-site-request-forgery-change-password