Description
In PiranhaCMS, versions 4.0.0-alpha1 to 9.2.0 are vulnerable to cross-site request forgery (CSRF) when performing various actions supported by the management system, such as deleting a user, deleting a role, editing a post, deleting a media folder etc., when an ID is known.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PiranhaCMS | Piranha | 4.0.0-alpha1 – < unspecified, unspecified – ≤ 9.2.0 | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Piranha | >= 4.0.0-alpha1, < 10.0-alpha1 | 10.0-alpha1 | GHSA-ppq7-88c7-q879 |