Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

Release: pkp/pkp-lib 3.3.0-16 Clear all filters
TI-2023-05436 CVE-2023-5904 · GHSA-q675-425f-q77p

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00518 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05435 CVE-2023-5903 · GHSA-86g4-v35q-p7r3

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00518 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05432 CVE-2023-5900 · GHSA-5w9x-5g27-3wqv

Cross-Site Request Forgery in pkp/pkp-lib

Priority MEDIUM 53

Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00274 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352
TI-2023-05433 CVE-2023-5901 · GHSA-v93c-j63p-5mqw

Cross-site Scripting in pkp/pkp-lib

Priority LOW 23

Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00531 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05430 CVE-2023-5898 · GHSA-3jhg-jx8m-q62v

Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Priority HIGH 71

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00302 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352
TI-2023-05434 CVE-2023-5902

Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Priority MEDIUM 53

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00291 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352
TI-2023-05431 CVE-2023-5899 · GHSA-7592-7873-rfj4

Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Priority HIGH 71

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00302 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352
TI-2023-05427 CVE-2023-5895 · GHSA-r23r-h529-fcxw

Cross-site Scripting (XSS) - DOM in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00475 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05421 CVE-2023-5889 · GHSA-c2hr-fwvr-rxjm

Insufficient Session Expiration in pkp/pkp-lib

Priority LOW 36

Insufficient Session Expiration in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00518 Published 2023-11-01 Fixed in 3.3.0-16 CWE-613
TI-2023-05423 CVE-2023-5891 · GHSA-rhhg-49v7-xmqc

Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00467 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05424 CVE-2023-5892 · GHSA-9vrm-5j5h-x98j

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00467 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05425 CVE-2023-5893 · GHSA-g7x3-4v2w-9vxw

Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Priority HIGH 71

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00302 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352
TI-2023-05422 CVE-2023-5890 · GHSA-c368-3rx3-26ww

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00467 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79