CVE-2021-25976

2021-11-1609:15:06

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.2%

JSON

In PiranhaCMS, versions 4.0.0-alpha1 to 9.2.0 are vulnerable to cross-site request forgery (CSRF) when performing various actions supported by the management system, such as deleting a user, deleting a role, editing a post, deleting a media folder etc., when an ID is known.

CPENameOperatorVersion
piranha.coreeq7.0-sr2
piranha.coreeq4.1.0
piranha.coreeq5.2.0-beta1
piranha.coreeq8.0
piranha.coreeq6.0.2
piranha.coreeq4.3.1
piranha.coreeq4.0.0-alpha9
piranha.coreeq5.0.1
piranha.coreeq.6.1.1
piranha.coreeq4.0.0-alpha6

Name	Operator	Version
piranha.core	eq	7.0-sr2
piranha.core	eq	4.1.0
piranha.core	eq	5.2.0-beta1
piranha.core	eq	8.0
piranha.core	eq	6.0.2
piranha.core	eq	4.3.1
piranha.core	eq	4.0.0-alpha9
piranha.core	eq	5.0.1
piranha.core	eq	.6.1.1
piranha.core	eq	4.0.0-alpha6