CVE-2023-5897
Assigner: @huntrdev
Published: 2023-11-01T00:00:41.904Z
State: PUBLISHED
title: Cross-Site Request Forgery (CSRF) in pkp/customLocale
descriptions: value: Cross-Site Request Forgery (CSRF) in GitHub repository pkp/customLocale prior to 1.2.0-1.
affected: vendor: pkp
product: pkp/customLocale
versions: version: unspecified
lessThan: 1.2.0-1
status: affected
versionType: custom
metrics: cvssV3_0: version: 3.0
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
baseScore: 6.3
baseSeverity: MEDIUM
problemTypes: descriptions: type: CWE
description: CWE-352 Cross-Site Request Forgery (CSRF)
cweId: CWE-352
source: advisory: 7c215b8e-63f6-4146-b8e3-8482c731876f
discovery: EXTERNAL