GitHub Advisoryadvisory · Packagist

GHSA-2492-xxqf-6h78 Cross Site Request Forgery in SwiftyEdit

HIGH Published 2023-11-22 Modified 2023-11-29 Official page ↗

Aliases: CVE-2023-47350
Ecosystem: Packagist
Packages: swiftyedit/swiftyedit
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses: CWE-352
Reviewed: 2023-11-22

Affected packages

• Packagist swiftyedit/swiftyedit: < 1.2.0 → fixed in 1.2.0

Description

SwiftyEdit Content Management System prior to v1.2.0 is vulnerable to Cross Site Request Forgery (CSRF).

Related

Alias · CVE (1)

CVE-2023-47350 Cross-Site Request Forgery (CSRF) vulnerability in SwiftyEdit Content Management System prior to v1.2.0, allows remote attackers to… vulnerability

Weakness · CWE (1)

CWE-352 Cross-Site Request Forgery weakness

References