GHSA-67gv-xrw7-p72w
Phpsysinfo Cross Site Request Forgery (CSRF) vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | phpsysinfo/phpsysinfo | < 3.4.3 | 3.4.3 |
Details
As written in the advisory (Markdown source, shown as plain text).
Cross Site Request Forgery (CSRF) vulnerability in Phpsysinfo version 3.4.3 allows a remote attacker to obtain sensitive information via a crafted page in the XML.php file. Phpsysinfo 3.4.3 disables the functionality by default but the users may enable the vulnerable functionality.
References
External links from the advisory. They lead to third-party sites.