high8.8
CVE-2023-5898
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Impact
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pkp | Pkp Web Application Library | before 3.3.0-16 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/pkp/pkp-lib/commit/01feef7a9392d314bf75b97a7e099cf0a307acd9
- https://huntr.com/bounties/19801d12-b8ad-45e7-86e1-8f0230667c9e
- https://github.com/pkp/pkp-lib/commit/01feef7a9392d314bf75b97a7e099cf0a307acd9
- https://huntr.com/bounties/19801d12-b8ad-45e7-86e1-8f0230667c9e