CVE-2022-25523

2022-03-2521:15:09

Google

osv.dev

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.6%

JSON

TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery (CSRF) which is exploited via a crafted POST request.

CPENameOperatorVersion
typesettereq5.0b2
typesettereq4.4rc2
typesettereq4.3.3
typesettereq4.4b3
typesettereq5.0-rc4
typesettereq4.5b2
typesettereq4.3
typesettereq4.3.4
typesettereq4.3b1
typesettereq5.0-rc3

Name	Operator	Version
typesetter	eq	5.0b2
typesetter	eq	4.4rc2
typesetter	eq	4.3.3
typesetter	eq	4.4b3
typesetter	eq	5.0-rc4
typesetter	eq	4.5b2
typesetter	eq	4.3
typesetter	eq	4.3.4
typesetter	eq	4.3b1
typesetter	eq	5.0-rc3