Pagekit File Upload vulnerability

2022-05-2417:01:48

Google

osv.dev

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.3%

JSON

A CSRF vulnerability in Pagekit 1.0.17 allows an attacker to upload an arbitrary file by removing the CSRF token from a request.

CPENameOperatorVersion
pagekit/pagekiteq0.11.1
pagekit/pagekiteq1.0.16
pagekit/pagekiteq0.11.0
pagekit/pagekiteq1.0.11
pagekit/pagekiteq1.0.17
pagekit/pagekiteq1.0.12
pagekit/pagekiteq1.0.15
pagekit/pagekiteq0.8.8
pagekit/pagekiteq1.0.2
pagekit/pagekiteq1.0.13

Name	Operator	Version
pagekit/pagekit	eq	0.11.1
pagekit/pagekit	eq	1.0.16
pagekit/pagekit	eq	0.11.0
pagekit/pagekit	eq	1.0.11
pagekit/pagekit	eq	1.0.17
pagekit/pagekit	eq	1.0.12
pagekit/pagekit	eq	1.0.15
pagekit/pagekit	eq	0.8.8
pagekit/pagekit	eq	1.0.2
pagekit/pagekit	eq	1.0.13