Skip to content
OpenAdvisories
Medium · 6.3 CVE-2023-6671 EUVD-2023-58893GHSA-6vmx-c8gx-w58g

Cross-Site Request Forgery on OPEN JOURNAL SYSTEMS

Published Dec 11, 2023 · Updated Aug 2, 2024 · Assigned by INCIBE

Description

A vulnerability has been discovered on OJS, that consists in a CSRF (Cross-Site Request Forgery) attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated.

Affected products

VendorProductAffectedFixed
OPEN JOURNAL SYSTEMS OPEN JOURNAL SYSTEMS 3.3.0.13 —

Advisories 1

References