Cross-Site Request Forgery Vulnerability in Flarum by Flarum
CVE-2019-13183

8.8HIGH

Key Information:

Vendor

Flarum

Status
Flarum
Vendor
CVE Published:
7 July 2019

What is CVE-2019-13183?

A vulnerability exists in Flarum versions prior to 0.1.0-beta.9, allowing attackers to perform Cross-Site Request Forgery (CSRF) attacks against all POST endpoints. This can lead to unauthorized changes in admin settings, compromising the security and integrity of the web application.

References

https://github.com/flarum/core/blob/master/CHANGELOG.md
x_refsource_MISC
https://discuss.flarum.org/d/20606-flarum-0-1-0-beta-9-re...
x_refsource_CONFIRM
https://github.com/flarum/core/security/advisories/GHSA-3...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.