Description
YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the filemanager page handler, which deletes page attachments on GET requests without validating a CSRF token. Attackers can lure a logged-in page owner or administrator into a top-level GET navigation with do=del, erase, or emptytrash, deleting or permanently purging the page's attachments.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| YesWiki | yeswiki | < 4.6.7 | 4.6.7 |
References
- GitHub Security Advisory (GHSA-7m4h-m7qm-hc32) vendor-advisory
- VulnCheck Advisory: YesWiki before 4.6.7 CSRF Attachment Deletion via filemanager Handler third-party-advisory