4 matches found
CVE-2023-5900
Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
4.3CVSS6.9AI score0.0024EPSS
SaveExploits1
CVE-2023-5900 Cross-Site Request Forgery in pkp/pkp-lib
Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
3.5CVSS4.8AI score
SaveExploits0References4
CVE-2023-5900
CVE-2023-5900 is a Cross-Site Request Forgery vulnerability in the PKP Web Application Library used by PKP projects (OJS/OCS/OMP/OPS/OHS). The flaw affects versions prior to 3.3.0-16 and arises from a lack of CSRF authorization checking in the affected library. Public references describe the issu...
4.3CVSS4.4AI score0.0024EPSS
SaveExploits1References2Affected Software1
20