pkp

Records25All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

pkp records in CISA KEV

No pkp vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Pkp Web Application Library · all components

TI-2023-05431 CVE-2023-5899 · GHSA-7592-7873-rfj4

HIGH 71

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00302 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352

TI-2023-05430 CVE-2023-5898 · GHSA-3jhg-jx8m-q62v

HIGH 71

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00302 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352

TI-2023-05421 CVE-2023-5889 · GHSA-c2hr-fwvr-rxjm

LOW 36

Insufficient Session Expiration in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00518 Published 2023-11-01 Fixed in 3.3.0-16 CWE-613