~ / search / GHSA-22cq-xxr9-jrrv

GHSA-22cq-xxr9-jrrv

Zenario CMS vulnerable to CSRF

Source: GitHub Advisory Database (reviewed) High CVE-2018-18420

Packages

EcosystemPackageAffectedFixed in
Packagist tribalsystems/zenario < 8.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of Zenario Content Management System via the `admin/organizer.ajax.php?path=zenario__content%2Fpanels%2Fcontent` URI.

References

External links from the advisory. They lead to third-party sites.