CVE-2023-33359: CSRF
Published May 23, 2023
·Updated
Piwigo 13.6.0 is vulnerable to Cross Site Request Forgery (CSRF) in the "add tags" function.
Affected Software
1 affected component
Piwigo piwigo=13.6.0
Event History
May 23, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is Piwigo 13.6.0?
Piwigo 13.6.0 is a version of the Piwigo software.
2
What is Cross Site Request Forgery (CSRF)?
Cross Site Request Forgery (CSRF) is an attack where an attacker tricks a user into performing unwanted actions without their knowledge or consent.
3
What is the add tags function in Piwigo 13.6.0?
The add tags function in Piwigo 13.6.0 allows users to add tags to their photos.
4
How does the CSRF vulnerability in Piwigo 13.6.0 affect users?
The CSRF vulnerability in Piwigo 13.6.0 allows attackers to perform unwanted actions on behalf of the user, such as adding tags to their photos without their knowledge or consent.
5
How can users protect themselves from the CSRF vulnerability in Piwigo 13.6.0?
Users should update their Piwigo software to a version that has fixed the CSRF vulnerability or apply any available patches or fixes provided by the Piwigo team.