| Package | Affected versions | Patched versions |
|---|---|---|
| spina | < 0.6.29 | 0.6.29 |
| spina | ≤ 0.11.1 |
Cross-site request forgery (CSRF) vulnerability in Spina before commit bfe44f289e336f80b6593032679300c493735e75. Spina::ApplicationController actions didn't have CSRF protection. This causes a CSRF vulnerability across the entire engine which includes administrative functionality such as creating users, changing passwords, and media management.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free