Cross-Site Request Forgery in Anchor CMS

MÉDIO 4.5CVE-2022-25576 · GHSA-322v-p3jc-7hrg · Published 24/03/2022 · updated 17/06/2026

Em resumo

CVE-2022-25576 é uma vulnerabilidade MÉDIO (CVSS 4.5) que afeta anchorcms/anchor-cms, anchor cms (anchorcms).
Chance de exploração nos próximos 30 dias (EPSS): 0.40%, maior que 34.4% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
anchorcms/anchor-cms Packagist	`≤ 0.12.7`	No fix yet
anchor cms anchorcms	`= 0.12.7`	No fix yet

Description

Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component anchor/routes/posts.php. This vulnerability allows attackers to arbitrarily delete posts.

NVD description

Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component anchor/routes/posts.php. This vulnerability allows attackers to arbitrarily delete posts.

References

nvd.nist.gov/vuln/detail/CVE-2022-25576 · ADVISORY
anchorcms/anchor-cms · PACKAGE
butterflyhack/anchorcms-0.12.7-CSRF · WEB

Mais vulnerabilidades de anchorcms/anchor-cms

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

anchorcms/anchor-cms

Packagist

≤ 0.12.7

No fix yet

anchor cms

anchorcms

= 0.12.7

No fix yet

Description

Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component anchor/routes/posts.php. This vulnerability allows attackers to arbitrarily delete posts.

NVD description

Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component anchor/routes/posts.php. This vulnerability allows attackers to arbitrarily delete posts.

Mais vulnerabilidades de anchorcms/anchor-cms

Ver tudo →