CVE:CVE-2023-3029
CNNVD:CNNVD-202306-021
Guangdong Pythagorean OA Office System（勾股 OA）是中国勾股开源（gouguopen）开源的一款实用的企业办公系统。
Guangdong Pythagorean OA Office System 4.50.31之前版本存在跨站请求伪造漏洞，该漏洞源于/note/index/delete 存在未知代码，通过参数 id 导致跨站请求伪造。
solution:Upgrade pythagorean_oa_office_system_project pythagorean_oa_office_system to a higher version than 4.50.31,and avoid the version (,4.50.31]