CVE-2019-12253

2019-05-2117:29:00

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.0%

JSON

my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.

CPENameOperatorVersion
mylittleforumeq2.4.3
mylittleforumeq2.4.9
mylittleforumeq2.2.4
mylittleforumeq2.4.11
mylittleforumeq2.3.3
mylittleforumeq2.3.7
mylittleforumeq2.4.18
mylittleforumeq2.4.4
mylittleforumeq2.2.2
mylittleforumeq2.2.1

Name	Operator	Version
mylittleforum	eq	2.4.3
mylittleforum	eq	2.4.9
mylittleforum	eq	2.2.4
mylittleforum	eq	2.4.11
mylittleforum	eq	2.3.3
mylittleforum	eq	2.3.7
mylittleforum	eq	2.4.18
mylittleforum	eq	2.4.4
mylittleforum	eq	2.2.2
mylittleforum	eq	2.2.1