CVE-2020-15135

CVE-2020-15135 describes a Cross-Site Request Forgery (CSRF) vulnerability in the save-server npm package prior to version 1.0.7, affecting the save-server_project. This vulnerability allows an attacker to perform actions like uploading/deleting files and adding redirects if a logged-in user navigates to a malicious site. The severity is rated as HIGH (CVSS 7.6), with a low attack complexity and requiring user interaction, potentially leading to high confidentiality and integrity impacts, especially if the compromised user has root privileges. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.