CVE-2018-14519: CSRF
Published Aug 24, 2022
·Updated
An issue was discovered in Kirby 2.5.12. The delete page functionality suffers from a CSRF flaw. A remote attacker can craft a malicious CSRF page and force the user to delete a page.
Affected Software
1 affected component
getkirby Kirby=2.5.12
Event History
Aug 24, 2022
CVE Published
via MITRE·07:43 PM
Data Sourced
via MITRE·07:43 PM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-14519?
CVE-2018-14519 is classified as a medium severity vulnerability due to its CSRF exploit potential.
2
How do I fix CVE-2018-14519?
To fix CVE-2018-14519, update Kirby to the latest version that addresses the CSRF vulnerability.
3
What types of attacks can exploit CVE-2018-14519?
CVE-2018-14519 can be exploited through crafted CSRF attacks that force users to unknowingly delete pages.
4
What software versions are affected by CVE-2018-14519?
CVE-2018-14519 specifically affects Kirby version 2.5.12.
5
Is user authentication sufficient to mitigate CVE-2018-14519?
User authentication alone is not sufficient, as CVE-2018-14519 is susceptible to CSRF attacks regardless of authentication.