Zenario CMS vulnerable to CSRF

高危 8.8CVE-2018-18420 · GHSA-22cq-xxr9-jrrv · Published 19/10/2018 · updated 17/06/2026

要点

CVE-2018-18420 是影响 tribalsystems/zenario, zenario (tribalsystems) 的高危 (CVSS 8.8)漏洞。
未来 30 天内被利用的概率（EPSS）：0.82%，高于 57.3% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
tribalsystems/zenario Packagist	`all versions`	No fix yet
zenario tribalsystems	`= 8.3`	No fix yet

Description

Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenario__content%2Fpanels%2Fcontent URI.

NVD description

Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenario__content%2Fpanels%2Fcontent URI.

References

tribalsystems/zenario 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tribalsystems/zenario

Packagist

all versions

No fix yet

zenario

tribalsystems

= 8.3

No fix yet

Description

Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenario__content%2Fpanels%2Fcontent URI.

NVD description

Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenario__content%2Fpanels%2Fcontent URI.

tribalsystems/zenario 的其他漏洞

查看全部 →