HIGH🇵🇱 Wersja polska

CVE-2023-5898

CVSS 8.8v3.1pub. 2023-11-01upd. 2024-11-21

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Pkp Web Application Library

    APP
    Pkp
    < 3.3.0-16
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-5889HIGH8.2same product

Insufficient Session Expiration in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVE-2023-5899HIGH8.8same product

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVE-2023-4695HIGH8.1same vendor

Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVE-2012-1467MEDIUM6.5same vendor

Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems b...

CVE-2012-1468MEDIUM6.0same vendor

Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote authenticated users with...