CVE-2023-4865

A vulnerability has been found in SourceCodester Take-Note App 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-239350 is the identifier assigned to this vulnerability.

• CWE-352

• https://skypoc.wordpress.com/2023/09/05/sourcecodester-take-note-app-v1-0-has-multiple-vulnerabilities/Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.239350Permissions Required, Third Party Advisory
• https://vuldb.com/?id.239350Third Party Advisory
• https://skypoc.wordpress.com/2023/09/05/sourcecodester-take-note-app-v1-0-has-multiple-vulnerabilities/Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.239350Permissions Required, Third Party Advisory
• https://vuldb.com/?id.239350Third Party Advisory

Published

Sep 9, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-48643Shrubbery tac_plus 2.x, 3.x. and 4.x through F4.0.4.28 allow…9.8
• CVE-2023-48644An issue was discovered in the Archibus app 4.0.3 for iOS. T…6.1
• CVE-2023-48645An issue was discovered in the Archibus app 4.0.3 for iOS. I…7.8
• CVE-2023-48646Zoho ManageEngine RecoveryManager Plus before 6070 allows ad…7.2
• CVE-2023-48648Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows unaut…9.8
• CVE-2023-48649Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows store…5.4
• CVE-2023-48650Concrete CMS before 8.5.14 and 9 before 9.2.3 is vulnerable …4.8
• CVE-2023-48651Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Requ…4.3
• CVE-2023-48652Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Requ…4.3
• CVE-2023-48653Concrete CMS before 8.5.14 and 9 before 9.2.3 allows Cross S…4.3
• CVE-2023-48654One Identity Password Manager before 5.13.1 allows Kiosk Esc…9.8
• CVE-2023-48655An issue was discovered in MISP before 2.4.176. app/Controll…9.8