GitHub Advisoryadvisory · Go

GHSA-f6xp-59jq-r35c Phachon mm-wiki Cross Site Request Forgery vulnerability

HIGH Published 2023-04-04 Modified 2023-04-10 Official page ↗
Aliases
CVE-2020-19278
Ecosystem
Go
Packages
github.com/phachon/mm-wiki
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-352
Reviewed
2023-04-10

Affected packages

• Go github.com/phachon/mm-wiki: <= 0.1.2 (no fix yet)

Description

Cross Site Request Forgery vulnerability found in Phachon mm-wiki v.0.1.2 allows a remote attacker to execute arbitrary code via the system/user/save parameter.

Related

Alias · CVE (1)

  • CVE-2020-19278 Cross Site Request Forgery vulnerability found in Phachon mm-wiki v.0.1.2 allows a remote attacker to execute arbitrary code via the… vulnerability

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References