Zenario CMS vulnerable to CSRF

ALTO 8.8CVE-2018-18420 · GHSA-22cq-xxr9-jrrv · Published 19/10/2018 · updated 17/06/2026

Em resumo

CVE-2018-18420 é uma vulnerabilidade ALTO (CVSS 8.8) que afeta tribalsystems/zenario, zenario (tribalsystems).
Chance de exploração nos próximos 30 dias (EPSS): 0.82%, maior que 57.3% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
tribalsystems/zenario Packagist	`all versions`	No fix yet
zenario tribalsystems	`= 8.3`	No fix yet

Description

Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenario__content%2Fpanels%2Fcontent URI.

NVD description

Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenario__content%2Fpanels%2Fcontent URI.

References

Mais vulnerabilidades de tribalsystems/zenario

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tribalsystems/zenario

Packagist

all versions

No fix yet

zenario

tribalsystems

= 8.3

No fix yet

Description

Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenario__content%2Fpanels%2Fcontent URI.

NVD description

Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenario__content%2Fpanels%2Fcontent URI.

Mais vulnerabilidades de tribalsystems/zenario

Ver tudo →