What is GHSA-pq7f-cq6q-94xh?

GHSA-pq7f-cq6q-94xh is a security advisory published by GitHub Security Advisories with High severity. Cross-Site Request Forgery in Elefant CMS

Which CVE IDs does GHSA-pq7f-cq6q-94xh cover?

GHSA-pq7f-cq6q-94xh covers the following CVE IDs: CVE-2017-20062. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pq7f-cq6q-94xh?

GHSA-pq7f-cq6q-94xh has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-pq7f-cq6q-94xh?

GHSA-pq7f-cq6q-94xh affects 1 product, including: composer/elefant/cms:\u003c 1.3.13.

GHSA-pq7f-cq6q-94xhHighCVSS 8.8

Cross-Site Request Forgery in Elefant CMS

Vendor

GitHub Security Advisories

Published

June 21, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2017-20062 →

📋 Description

A vulnerability was found in Elefant CMS 1.3.12-RC and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component.

🎯 Affected products1

composer/elefant/cms:< 1.3.13

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2017-20062
https://vuldb.com/?id.97259
http://seclists.org/fulldisclosure/2017/Feb/37
https://github.com/advisories/GHSA-pq7f-cq6q-94xh