| Package | Affected versions | Patched versions |
|---|---|---|
| projectforge | = 5.0= 5.1≤ 5.2 |
Multiple cross-site request forgery (CSRF) vulnerabilities in ProjectForge before 5.3 allow remote attackers to hijack the authentication of arbitrary users via vectors related to (1) web/admin/, (2) web/core/, (3) web/dialog/, (4) web/fibu/, (5) web/mobile/, (6) web/task/, or (7) web/wicket/.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free