CVE-2018-10758

The edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a delete action that can delete articles...

PT-2018-10087

Name of the Vulnerable Software and Affected Versions Datenstrom Yellow version 0.7.3 Description The issue concerns a CSRF vulnerability via the edit/ URI, specifically through a delete action, which can result in the deletion of articles. Recommendations For version 0.7.3, consider restricting...