| Package | Affected versions | Patched versions |
|---|---|---|
| seeddms | = 6.0.6≥ 5.1.0, < 5.1.23≥ 6.0.7, < 6.0.16 | 5.1.236.0.16 |
Cross-Site Request Forgery (CSRF) vulnerability in the /op/op.Ajax.php in SeedDMS v5.1.x<5.1.23 and v6.0.x<6.0.16 allows a remote attacker to edit document name without victim's knowledge, by enticing an authenticated user to visit an attacker's web page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free