Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS0yNDkyLXh4cWYtNmg3OM4AA3T0

Cross Site Request Forgery in SwiftyEdit

SwiftyEdit Content Management System prior to v1.2.0 is vulnerable to Cross Site Request Forgery (CSRF).

Permalink: https://github.com/advisories/GHSA-2492-xxqf-6h78
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yNDkyLXh4cWYtNmg3OM4AA3T0
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: 6 months ago
Updated: 3 months ago

CVSS Score: 8.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Identifiers: GHSA-2492-xxqf-6h78, CVE-2023-47350
References:

• https://nvd.nist.gov/vuln/detail/CVE-2023-47350
• https://github.com/SwiftyEdit/SwiftyEdit/commit/90a6f3df16cd1578b2827d7b2e073451f7ce4e47
• https://mechaneus.github.io/CVE-2023-47350.html
• https://github.com/advisories/GHSA-2492-xxqf-6h78

Repository: https://github.com/SwiftyEdit/SwiftyEdit
Blast Radius: 1.0

Affected Packages