Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
•added 2022/05/24 5:18 p.m.•32 views

Image Resizer Cross-Site Request Forgery (CSRF)

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action...

8.8CVSS7.3AI score0.00484EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2022/05/24 5:18 p.m.•104 views

GHSA-5V5Q-3M7M-97J7 Image Resizer Cross-Site Request Forgery (CSRF)

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action...

8.8CVSS8.8AI score0.00484EPSS
SaveExploits0References3
Prion
Prion
•added 2020/05/25 5:15 p.m.•18 views

Cross site request forgery (csrf)

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action...

6.8CVSS8.7AI score0.00484EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2020/05/25 4:34 p.m.•3 views

CVE-2020-13458

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action...

8.8CVSS0.00484EPSS
SaveExploits0References3
CVE
CVE
•added 2020/05/25 4:34 p.m.•64 views

CVE-2020-13458

CVE-2020-13458 affects the Craft CMS Image Resizer plugin prior to 2.0.9. The issue is a CSRF flaw in the log-clear controller action, enabling CSRF exploitation with no authentication and requiring user interaction. CVSSv3.1 base score is 8.8 (HIGH) with network attack vector, low attack complex...

8.8CVSS8.7AI score0.00484EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/05/25 4:34 p.m.•68 views

CVE-2020-13458

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action...

8.8AI score0.00484EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/25 12:00 a.m.•7 views

CVE-2020-13458: Cross-Site Request Forgery (CSRF)

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action...

8.8CVSS7.8AI score0.00484EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/05/25 12:00 a.m.•5 views

PT-2020-13548

Name of the Vulnerable Software and Affected Versions Image Resizer plugin versions prior to 2.0.9 for Craft CMS Description The issue is related to CSRF problems with the log-clear controller action in the affected plugin. Recommendations For versions prior to 2.0.9, update to version 2.0.9 or...

8.8CVSS0.00484EPSS
SaveExploits0References6
Rows per page
Query Builder