CVE-2023-5961

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. An attacker can exploit this vulnerability to trick a client into making an unintentional request to the web server, which will be treated as an authentic request. This vulnerability may lead an attacker to perform operations on behalf of the victimized user.

• CWE-352
• CWE-352

• https://www.moxa.com/en/support/product-support/security-advisory/mpsa-235250-iologik-e1200-series-web-server-vulnerabilityVendor Advisory
• https://www.moxa.com/en/support/product-support/security-advisory/mpsa-235250-iologik-e1200-series-web-server-vulnerabilityVendor Advisory

Published

Dec 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-5955The Contact Form Email WordPress plugin before 1.3.44 does n…4.8
• CVE-2023-5956The Wp-Adv-Quiz WordPress plugin through 1.0.2 does not sani…4.8
• CVE-2023-5957The Ni Purchase Order(PO) For WooCommerce WordPress plugin t…7.2
• CVE-2023-5958The POST SMTP Mailer WordPress plugin before 2.7.1 does not …6.1
• CVE-2023-5959A vulnerability, which was classified as problematic, was fo…4.3
• CVE-2023-5960An improper privilege management vulnerability in the hotspo…5.5
• CVE-2023-5962A weak cryptographic algorithm vulnerability has been identi…6.5
• CVE-2023-5963An issue has been discovered in GitLab EE with Advanced Sear…4.3
• CVE-2023-5964The 1E-Exchange-DisplayMessageinstruction that is part of th…7.2
• CVE-2023-5965An authenticated privileged attacker could upload a speciall…7.2
• CVE-2023-5966An authenticated privileged attacker could upload a speciall…7.2
• CVE-2023-5967Mattermost fails to properly validate requests to the Calls …4.3