Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2021-25976

Piranha CMS - Site-wide Cross-Site Request Forgery (CSRF)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mend

Description

In PiranhaCMS, versions 4.0.0-alpha1 to 9.2.0 are vulnerable to cross-site request forgery (CSRF) when performing various actions supported by the management system, such as deleting a user, deleting a role, editing a post, deleting a media folder etc., when an ID is known.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PiranhaCMS Piranha

  • 4.0.0-alpha1 to < unspecifiedaffected
  • unspecified to ≤ 9.2.0affected

References