~ / search / GHSA-692x-89xv-64jx

GHSA-692x-89xv-64jx

Pagekit File Upload vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2019-19013

Packages

EcosystemPackageAffectedFixed in
Packagist pagekit/pagekit <= 1.0.17 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A CSRF vulnerability in Pagekit 1.0.17 allows an attacker to upload an arbitrary file by removing the CSRF token from a request.

References

External links from the advisory. They lead to third-party sites.