EUVD-2026-57608
GHSA-8mv7-9c27-98vc
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network CSRF requiring victim interaction (UI:R); no attacker privileges; scope changes to affect server state (S:C); blind write-only mutation limits impact to I:L with no confidentiality or availability consequence.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
3DescriptionCVE.org
Astro is a web framework for content-driven websites. From 7.0.0 until 7.0.6, the composable astro/hono pipeline installs security.checkOrigin only through the middleware() primitive, while actions() and pages() can dispatch to user code independently. Mounting actions() before middleware(), as in the examples/advanced-routing example and Cloudflare Hono documentation, allows cross-origin form-encoded action requests to execute before the origin check, and using pages() without middleware() drops the check for on-demand endpoints and pages. The flaw enables blind write-only cross-site request forgery using the victim's cookies against ActionHandler.handle and PagesHandler.handleWithErrorFallback when manifest.checkOrigin is enabled; the attacker can trigger a state-mutating action or endpoint handler but cannot read the cross-origin response. The default non-composable astro() pipeline is not affected. This issue is fixed in version 7.0.6.
AnalysisAI
Cross-site request forgery in Astro 7.0.0-7.0.5 allows unauthenticated network attackers to trigger state-mutating Actions and on-demand page endpoints using a victim's session cookies when the composable astro/hono pipeline is configured with actions() or pages() mounted without a preceding middleware() call. The default non-composable astro() pipeline is entirely unaffected; only deployments following the vulnerable pipeline composition pattern - which was demonstrated in the official examples/advanced-routing example and Cloudflare Hono documentation - are exposed. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires all four of the following conditions: (1) the target application uses the composable `astro/hono` pipeline - NOT the default `astro()` all-in-one pipeline, which is fully unaffected; (2) within that pipeline, either `actions()` is mounted before `middleware()` OR `pages()` is used without `middleware()` being present at all; (3) `security.checkOrigin` is `true`, which is the framework default and therefore met in virtually all unmodified installations; and (4) the victim must hold an active authenticated session on the target application AND must visit an attacker-controlled page that submits a cross-origin form request. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 5.1 (Medium, AV:N/AC:L/AT:N/PR:N/UI:A/SC:N/SI:L/SA:N) accurately reflects real-world risk: the attack requires no attacker privileges and is network-based with low complexity, but active victim interaction is required and the impact is limited to blind integrity mutation of subsequent-system state with no confidentiality or availability consequence. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker hosts a webpage containing a hidden HTML form whose action attribute targets a state-mutating Astro Action endpoint on the victim's server (e.g., an account-settings update or funds-transfer action). When an authenticated victim visits the attacker's page - via a phishing link or a malicious ad - the browser auto-submits the form with the victim's session cookies attached. … |
| Remediation | The primary fix is to upgrade to Astro 7.0.6 via `npm install astro@7.0.6` or equivalent; this release applies the origin check independently at both `ActionHandler.handle` and `PagesHandler.handleWithErrorFallback` regardless of pipeline assembly order, as documented in the release at https://github.com/withastro/astro/releases/tag/astro@7.0.6 and implemented in https://github.com/withastro/astro/pull/17250. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
SQL Injection exists in the Saxum Astro 4.0.14 component for Joomla!. Rated critical severity (CVSS 9.8), this vulnerabi
Astro is a web framework for content-driven websites. Rated high severity (CVSS 7.8), this vulnerability is remotely exp
Astro is a web framework. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication
Astro is a web framework for content-driven websites. Rated medium severity (CVSS 6.9), this vulnerability is remotely e
Astro is a web framework. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authenticatio
Astro is a web framework for content-driven websites. Rated medium severity (CVSS 5.5), this vulnerability is remotely e
Reflected XSS in Astro's server-side View Transition CSS generator affects all server-rendered or on-demand Astro applic
Authentication/authorization bypass in Clerk's official JavaScript SDKs (@clerk/nextjs, @clerk/nuxt, @clerk/astro, and t
Authorization bypass in the Astro web framework version 6.4.7 lets remote unauthenticated attackers reach protected rout
Regex metacharacter injection in @astrojs/netlify prior to 8.1.2 causes the Netlify Image CDN allowlist to be broader th
Sentry-Javascript is official Sentry SDKs for JavaScript. Rated high severity (CVSS 7.5), this vulnerability is remotely
Path override bypass in the @astrojs/vercel ISR entrypoint (versions 10.0.3 through 11.0.2) exposes edge-protected route
Same weakness CWE-352 – Cross-Site Request Forgery (CSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today