What is GHSA-w2g4-g8xr-px4x?

GHSA-w2g4-g8xr-px4x is a security advisory published by GitHub Security Advisories with Medium severity. CSRF in PHP Server Monitor before 3.3.2

Which CVE IDs does GHSA-w2g4-g8xr-px4x cover?

GHSA-w2g4-g8xr-px4x covers the following CVE IDs: CVE-2018-18921. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-w2g4-g8xr-px4x?

GHSA-w2g4-g8xr-px4x has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-w2g4-g8xr-px4x?

GHSA-w2g4-g8xr-px4x affects 1 product, including: composer/phpservermon/phpservermon:\u003c= 3.3.1.

GHSA-w2g4-g8xr-px4xMediumCVSS 6.5

CSRF in PHP Server Monitor before 3.3.2

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

July 7, 2023

🔗 CVE IDs covered (1)

CVE-2018-18921 →

📋 Description

PHP Server Monitor before 3.3.2 has CSRF, as demonstrated by a Delete action.

🎯 Affected products1

composer/phpservermon/phpservermon:<= 3.3.1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2018-18921
https://medium.com/bugbountywriteup/cve-2018-18921-php-server-monitor-3-3-1-cross-site-request-forgery-a73e8dae563
https://github.com/phpservermon/phpservermon/issues/670#issuecomment-440873239
https://github.com/phpservermon/phpservermon/commit/30150714a8af0c82259b733f604fce54c0dcbf40
https://github.com/advisories/GHSA-w2g4-g8xr-px4x