Cross-Site Request Forgery (CSRF) in pkp/ojs
CVE-2023-5626

3.5LOW

Key Information:

Vendor: Pkp
Status: Pkp/ojs
Vendor: CVE Published:; 18 October 2023

🔔 Create Pkp Vulnerability Alert

What is CVE-2023-5626?

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16.

Affected Version(s)

pkp/ojs < 3.3.0-16

References

https://huntr.dev/bounties/c99279c1-709a-4e7b-a042-010c2b...

https://github.com/pkp/ojs/commit/99a9f393190383454aa5ddf...

CVSS V3.1

Score:

3.5

Severity:

LOW

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 18, 2023
Vulnerability Reserved
Oct 17, 2023

CVE-2023-5626 Data

.