CVE-2020-23836: Oswapp Warehouse Inventory System

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A Cross-Site Request Forgery (CSRF) vulnerability in edit_user.php in OSWAPP Warehouse Inventory System (aka OSWA-INV) through 2020-08-10 allows remote attackers to change the admin's password after an authenticated admin visits a third-party site.

Affected products

• Oswapp Warehouse Inventory System: up to and including 2020-08-10

Published 2020-09-01. Last modified 2026-06-17.