medium4.9
CVE-2018-13407
A CSRF issue was discovered in Jirafeau before 3.4.1.
Impact
A CSRF issue was discovered in Jirafeau before 3.4.1. The "delete file" feature on the admin panel is not protected against automated requests and could be abused.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jirafeau | Jirafeau | before 3.4.1 |