CVE-2018-13407 A CSRF issue was discovered in Jirafeau before 3.4.1. The "delete file" feature on the admin panel is not protected against automated requests and could be abused.
MediumCVSS 4.9
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A CSRF issue was discovered in Jirafeau before 3.4.1. The "delete file" feature on the admin panel is not protected against automated requests and could be abused.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jirafeau | < 3.4.1 | 3.4.1 |
References
- www.bishopfox.com exploit third-party-advisory