CVE:CVE-2023-2307
CNNVD:CNNVD-202304-2095
qwik是一款微型Web框架。
qwik 0.104.0之前版本存在跨站请求伪造漏洞。攻击者利用该漏洞执行跨站请求伪造攻击。
solution:Upgrade builder qwik to a higher version than 0.104.0,and avoid the version (,0.104.0)