Описание
In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form allows CSRF.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | DNE | |
| esm-apps/bionic | needs-triage | |
| esm-apps/focal | needs-triage | |
| esm-apps/jammy | not-affected | |
| esm-apps/xenial | needs-triage | |
| esm-infra-legacy/trusty | DNE | |
| focal | ignored | end of standard support, was needs-triage |
| groovy | ignored | end of life |
| hirsute | not-affected | 5.33.2+dfsg1-1 |
Показывать по
4.3 Medium
CVSS2
4.3 Medium
CVSS3
Связанные уязвимости
In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form allows CSRF.
In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEdit ...
In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form allows CSRF.
Уязвимость формы конфигурации CKEditor веб-системы отслеживания связей и управления взаимодействием CiviCRM, связанная с подделкой межсайтовых запросов, позволяющая нарушителю оказать воздействие на целостность данных
4.3 Medium
CVSS2
4.3 Medium
CVSS3