What is GHSA-c7x2-7h8r-jq4m?

GHSA-c7x2-7h8r-jq4m is a security advisory published by GitHub Security Advisories with Medium severity. Kirby CMS 2.5.12 Cross-site Request Forgery

Which CVE IDs does GHSA-c7x2-7h8r-jq4m cover?

GHSA-c7x2-7h8r-jq4m covers the following CVE IDs: CVE-2018-14519. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c7x2-7h8r-jq4m?

GHSA-c7x2-7h8r-jq4m has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-c7x2-7h8r-jq4m?

GHSA-c7x2-7h8r-jq4m affects 1 product, including: composer/getkirby/cms:\u003c= 2.5.12.

GHSA-c7x2-7h8r-jq4mMediumCVSS 4.3

Kirby CMS 2.5.12 Cross-site Request Forgery

Vendor

GitHub Security Advisories

Published

August 25, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2018-14519 →

📋 Description

An issue was discovered in Kirby 2.5.12. The delete page functionality suffers from a CSRF flaw. A remote attacker can craft a malicious CSRF page and force the user to delete a page.

🎯 Affected products1

composer/getkirby/cms:<= 2.5.12

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2018-14519
https://www.exploit-db.com/exploits/45090
http://zaranshaikh.blogspot.com
https://github.com/advisories/GHSA-c7x2-7h8r-jq4m