HIGH8.8

GHSA-f6xp-59jq-r35c

Phachon mm-wiki Cross Site Request Forgery vulnerability

Details

Cross Site Request Forgery vulnerability found in Phachon mm-wiki v.0.1.2 allows a remote attacker to execute arbitrary code via the system/user/save parameter.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/phachon/mm-wiki

Introduced in: 0

No fixed version published yet for github.com/phachon/mm-wiki (go modules). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2020-19278[ADVISORY]
https://github.com/phachon/mm-wiki/issues/68[WEB]
https://github.com/phachon/mm-wiki[PACKAGE]
https://imgur.com/EABvnwz[WEB]