Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1wcTdmLWNxNnEtOTR4aM4AAs5P

Cross-Site Request Forgery in Elefant CMS

A vulnerability was found in Elefant CMS 1.3.12-RC and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component.

Permalink: https://github.com/advisories/GHSA-pq7f-cq6q-94xh
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wcTdmLWNxNnEtOTR4aM4AAs5P
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: almost 2 years ago
Updated: about 1 year ago

CVSS Score: 8.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Identifiers: GHSA-pq7f-cq6q-94xh, CVE-2017-20062
References:

• https://nvd.nist.gov/vuln/detail/CVE-2017-20062
• https://vuldb.com/?id.97259
• http://seclists.org/fulldisclosure/2017/Feb/37
• https://github.com/advisories/GHSA-pq7f-cq6q-94xh

Blast Radius: 5.3

Affected Packages