Description
Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/users/delete/2.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | anchorcms/anchor-cms | <= 0.12.7 | — | GHSA-4xw8-9fj7-j58j |
High · 7.4
CVE-2024-29499
EUVD-2024-0819GHSA-4xw8-9fj7-j58j
Cross-Site Request Forgery in Anchor CMS
Published Mar 22, 2024 · Updated Aug 2, 2024 · Assigned by mitre