Packagist/elefant/cms CVE-2017-20062: high 8.8, EPSS 0.38%
Cross-Site Request Forgery in Elefant CMS
Action: Upgrade elefant/cms to 1.3.13 or later.
composer require elefant/cms:1.3.13Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.13 | - |
Fixed versions
| 1.3.13 |
Sources
- osv: GHSA-pq7f-cq6q-94xh
- https://nvd.nist.gov/vuln/detail/CVE-2017-20062
- https://github.com/jbroadway/elefant
- https://vuldb.com/?id.97259
- http://seclists.org/fulldisclosure/2017/Feb/37
CVE-2017-20062 · published · modified · JSON