CVE-2023-45670

CVE-2023-45670 describes a Cross-Site Request Forgery (CSRF) vulnerability in Frigate, an open-source network video recorder, affecting versions prior to 0.13.0 Beta 3. This flaw allows an attacker to update the Frigate server's configuration arbitrarily, potentially leading to denial of service or data exfiltration. The vulnerability has a CVSS score of 6.8 (Medium) due to its network attack vector, high attack complexity, and user interaction requirement. While there is no evidence of active exploitation, public exploit code, or significant community discussion, successful exploitation requires specific knowledge of the target Frigate instance and tricking an authenticated user into clicking a malicious link.