What is GHSA-2492-xxqf-6h78?

GHSA-2492-xxqf-6h78 is a security advisory published by GitHub Security Advisories with High severity. Cross Site Request Forgery in SwiftyEdit

Which CVE IDs does GHSA-2492-xxqf-6h78 cover?

GHSA-2492-xxqf-6h78 covers the following CVE IDs: CVE-2023-47350. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2492-xxqf-6h78?

GHSA-2492-xxqf-6h78 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-2492-xxqf-6h78?

GHSA-2492-xxqf-6h78 affects 1 product, including: composer/swiftyedit/swiftyedit:\u003c 1.2.0.

GHSA-2492-xxqf-6h78HighCVSS 8.8

Cross Site Request Forgery in SwiftyEdit

Vendor

GitHub Security Advisories

Published

November 22, 2023

Last Modified

January 24, 2024

🔗 CVE IDs covered (1)

CVE-2023-47350 →

📋 Description

SwiftyEdit Content Management System prior to v1.2.0 is vulnerable to Cross Site Request Forgery (CSRF).

🎯 Affected products1

composer/swiftyedit/swiftyedit:< 1.2.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2023-47350
https://github.com/SwiftyEdit/SwiftyEdit/commit/90a6f3df16cd1578b2827d7b2e073451f7ce4e47
https://mechaneus.github.io/CVE-2023-47350.html
https://github.com/advisories/GHSA-2492-xxqf-6h78