Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: pkp Component: Pkp Web Application Library Clear all filters
TI-2023-05430 CVE-2023-5898 · GHSA-3jhg-jx8m-q62v

Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Priority HIGH 71

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00302 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352
TI-2023-05431 CVE-2023-5899 · GHSA-7592-7873-rfj4

Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Priority HIGH 71

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00302 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352
TI-2023-05421 CVE-2023-5889 · GHSA-c2hr-fwvr-rxjm

Insufficient Session Expiration in pkp/pkp-lib

Priority LOW 36

Insufficient Session Expiration in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00518 Published 2023-11-01 Fixed in 3.3.0-16 CWE-613