Cross-Site Request Forgery in pkp/pkp-lib
CVE-2023-5900

5.4MEDIUM

Key Information:

Vendor: pkp
Status: pkp/pkp-lib
Vendor: CVE Published:; 7 November 2023

🔔 Create pkp Vulnerability Alert

What is CVE-2023-5900?

Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Affected Version(s)

pkp/pkp-lib < 3.3.0-16

References

https://huntr.com/bounties/c3f011d4-9f76-4b2b-b3d4-a5e2ec...

https://github.com/pkp/pkp-lib/commit/4d77a00be9050fac7eb...

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 7, 2023
Vulnerability Reserved
Nov 1, 2023

CVE-2023-5900 Data

.