HIGH🇬🇧 English

CVE-2019-13183

CVSS 8.8v3.0pub. 2019-07-07upd. 2024-11-21

Flarum before 0.1.0-beta.9 allows CSRF against all POST endpoints, as demonstrated by changing admin settings.

oryginał EN
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Flarum

    APP
    Flarum
    0.1.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2022-41938CRITICAL9.0ten sam produkt

Flarum is an open source discussion platform. Flarum's page title system allowed for page titles to be convert...

CVE-2021-32671CRITICAL10.0ten sam produkt

Flarum is a forum software for building communities. Flarum's translation system allowed for string inputs to ...

CVE-2023-40033HIGH7.1ten sam produkt

Flarum is an open source forum software. Flarum is affected by a vulnerability that allows an attacker to cond...

CVE-2023-22487HIGH7.7ten sam produkt

Flarum is a forum software for building communities. Using the mentions feature provided by the flarum/mention...

CVE-2019-11514HIGH7.5ten sam produkt

User/Command/ConfirmEmailHandler.php in Flarum before 0.1.0-beta.8 mishandles invalidation of user email token...