Cross-Site Request Forgery

2022-08-2506:39:48

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

41.5%

JSON

getkirby/kirby is vulnerable to cross-site request forgery. The vulnerability exists because delete page functionality is not properly handled which allows a remote attacker to inject and execute malicious script into the system.

CPENameOperatorVersion
getkirby/kirbyeq2.5.12
getkirby/kirbyeq2.5.12

CPE	Name	Operator	Version
	getkirby/kirby	eq	2.5.12
	getkirby/kirby	eq	2.5.12

References

zaranshaikh.blogspot.com

github.com/advisories/GHSA-c7x2-7h8r-jq4m

www.exploit-db.com/exploits/45090

0.001 Low

EPSS

Percentile

41.5%

JSON

Related for VERACODE:36804