Packagist/automad/automad CVE-2023-7038: medium 4.3, EPSS 0.39%

Cross-Site Request Forgery (CSRF) in automad/automad

Action: Upgrade automad/automad to 2.0.0-alpha.1 or later.

composer require automad/automad:2.0.0-alpha.1

Affected

Fixed versions

Sources

• osv: GHSA-4j8w-p6hv-3qxc
• https://nvd.nist.gov/vuln/detail/CVE-2023-7038
• https://github.com/marcantondahmen/automad
• https://github.com/screetsec/VDD/tree/main/Automad%20CMS/Cross-Site%20Request%20Forgery%20(CSRF)
• https://vuldb.com/?ctiid.248687
• https://vuldb.com/?id.248687

CVE-2023-7038 · published 2023-12-21T18:30:23Z · modified 2024-08-19T21:09:50.488272Z · JSON