← Back

CVE-2019-13183

nvd nist
Published: Jul 7, 2019Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Flarum before 0.1.0-beta.9 allows CSRF against all POST endpoints, as demonstrated by changing admin settings.

Affected (12)

Products: Flarum: Flarum
Flarum
1 product
Flarum
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Flarum
Flarum
Version 0.1.0
Flarum
Version 0.1.0 beta2
Flarum
Version 0.1.0 beta3
Flarum
Version 0.1.0 beta4
Flarum
Version 0.1.0 beta5
Flarum
Version 0.1.0 beta6
Flarum
Version 0.1.0 beta7.1
Flarum
Version 0.1.0 beta7.2
Flarum
Version 0.1.0 beta7
Flarum
Version 0.1.0 beta8.1
Flarum
Version 0.1.0 beta8.2
Flarum
Version 0.1.0 beta8

Related CWEs

CWE-352
Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (6)

Source: cve@mitre.org
Release NotesVendor Advisory
Source: cve@mitre.org
Release NotesThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.