CVE-2026-4971

MEDIUM

SourceCodester Note Taking App cross-site request forgery

Title source: cna

Description

A weakness has been identified in SourceCodester Note Taking App up to 1.0. This impacts an unknown function. This manipulation causes cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

References (5)

Core 5

Core References

Product product

https://www.sourcecodester.com/

Vdb Entry vdb-entry

VDB-353858 | SourceCodester Note Taking App cross-site request forgery

https://vuldb.com/?id.353858

Signature, Permissions Required signature permissions-required

VDB-353858 | CTI Indicators (IOB, IOC)

https://vuldb.com/?ctiid.353858

Third Party Advisory third-party-advisory

Submit #777877 | SourceCodester Note Taking App 1.0 Cross Site Request Forgery

https://vuldb.com/?submit.777877

Exploit exploit

https://gist.github.com/Mohdanass/b7c5984922238397d10644f5f33ec592

Scores

CVSS v3 4.3

EPSS 0.0015

EPSS Percentile 4.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-352 CWE-862

Status published

Products (1)

SourceCodester/Note Taking App 1.0

Published Mar 27, 2026

Tracked Since Mar 29, 2026