~ / search / GHSA-82xf-8h9p-c6qj

GHSA-82xf-8h9p-c6qj

Cross-Site Request Forgery in forkcms

Source: GitHub Advisory Database (reviewed) High CVE-2020-23264

Packages

EcosystemPackageAffectedFixed in
Packagist forkcms/forkcms < 5.8.2 5.8.2

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-site request forgery (CSRF) in Fork-CMS before 5.8.2 allow remote attackers to hijack the authentication of logged administrators.

References

External links from the advisory. They lead to third-party sites.