CVE-2026-5219

Deferred Deferred - Pending Action

CSRF Vulnerability in Softtr E-Commerce Pack

Publication date: 2026-07-30

Last updated on: 2026-07-31

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description

Cross-Site request forgery (CSRF) vulnerability in Softtr Information Technology Trade Ltd. Co. E-Commerce Pack allows Cross Site Request Forgery. This issue affects E-Commerce Pack: before 5.03.01.49.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-30

Last Modified

2026-07-31

Generated

2026-08-19

AI Q&A

2026-07-30

EPSS Evaluated

2026-08-18

NVD

CVE-2026-5219

EUVD

EUVD-2026-51126

Affected Vendors & Products

Vendor	Product	Version / Range
softtr_information_technology_trade_ltd_co	e-commerce_pack	to 30072026 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-352	The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This is a Cross-Site Request Forgery (CSRF) vulnerability in the Softtr Information Technology Trade Ltd. Co. E-Commerce Pack software. It allows attackers to trick users into submitting unauthorized requests without their knowledge or consent.

Detection Guidance

Detection of CSRF vulnerabilities typically involves reviewing web application code for missing or improper CSRF tokens in forms and state-changing requests. Network-level detection may include monitoring for unusual cross-origin requests or POST requests without referer headers. No specific commands are provided in the CVE details.

Impact Analysis

An attacker could exploit this to perform actions on your behalf, such as changing account settings, making unauthorized purchases, or accessing sensitive data. This could lead to financial loss, data breaches, or unauthorized account access.

Compliance Impact

This vulnerability could lead to unauthorized data access or modifications, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Non-compliance may result in legal penalties and reputational damage.

Mitigation Strategies

Implement CSRF tokens in all forms and sensitive requests to validate user intent. Ensure all authentication and state-changing actions require these tokens. Review and update web application firewall rules to block suspicious cross-origin requests.

Hi! I’m here to help you understand CVE-2026-5219. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70