| Package | Affected versions | Patched versions |
|---|---|---|
| opensis | = 9.0 |
OpenSIS Classic Community Edition version 9.0 lacks cross-site request forgery (CSRF) protection throughout the whole app. This may allow an attacker to trick an authenticated user into performing any kind of state changing request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free