MEDIUM4.5

GHSA-322v-p3jc-7hrg

Cross-Site Request Forgery in Anchor CMS

Details

Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component anchor/routes/posts.php. This vulnerability allows attackers to arbitrarily delete posts.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/anchorcms/anchor-cms

Introduced in: 0

No fixed version published yet for anchorcms/anchor-cms (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-25576[ADVISORY]
https://github.com/anchorcms/anchor-cms[PACKAGE]
https://github.com/butterflyhack/anchorcms-0.12.7-CSRF[WEB]