GitHub Advisoryadvisory · Packagist

GHSA-cjp8-vv38-p3g2 Cross-Site Request Forgery in feehi/feehicms

MEDIUM Published 2022-11-16 Modified 2023-06-27 Official page ↗
Aliases
CVE-2022-4014
Ecosystem
Packagist
Packages
feehi/feehicms
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weaknesses
CWE-352
Reviewed
2022-11-21

Affected packages

• Packagist feehi/feehicms: <= 2.0.1.1 (no fix yet)

Description

FeehiCMS vulnerable to Cross-Site Request Forgery. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack may be launched remotely.

Related

Alias · CVE (1)

  • CVE-2022-4014 A vulnerability, which was classified as problematic, has been found in FeehiCMS. vulnerability

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References