Skip to content

Cross-Site Request Forgery in Anchor CMS

High severity GitHub Reviewed Published Mar 22, 2024 to the GitHub Advisory Database • Updated Aug 2, 2024

Package

composer anchorcms/anchor-cms (Composer)

Affected versions

<= 0.12.7

Patched versions

None

Description

Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/categories/delete/2.

References

Published by the National Vulnerability Database Mar 22, 2024
Published to the GitHub Advisory Database Mar 22, 2024
Reviewed Mar 22, 2024
Last updated Aug 2, 2024

Severity

High

EPSS score

0.043%
(10th percentile)

Weaknesses

CVE ID

CVE-2024-29338

GHSA ID

GHSA-2whx-ccr7-fxqm

Source code

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.