CVE-2023-5626: Cross-Site Request Forgery (CSRF) in pkp/ojs
Published Oct 17, 2023
·Updated
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16.
Affected Software
1 affected component
Sfu Open Journal System<3.3.0-16
Remediation
Event History
Oct 17, 2023
CVE Published
via MITRE·11:22 PM
Data Sourced
via MITRE·11:22 PM
DescriptionSeverityWeakness
Oct 18, 2023
Data Sourced
12:15 AM
DescriptionSeverityWeakness
May 24, 57290
Event
via FIRST·01:25 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-5626?
The severity of CVE-2023-5626 is high with a severity value of 8.8.
2
What is the affected software for CVE-2023-5626?
The affected software for CVE-2023-5626 is SFU Open Journal System (OJS) prior to version 3.3.0-16.
3
What is Cross-Site Request Forgery (CSRF)?
Cross-Site Request Forgery (CSRF) is a web security vulnerability that allows an attacker to make requests on behalf of a victim user without their consent or knowledge.
4
How does CSRF affect GitHub repository pkp/ojs?
CSRF affects GitHub repository pkp/ojs prior to version 3.3.0-16 by allowing attackers to perform malicious actions on behalf of authenticated users.
5
How can I fix CVE-2023-5626?
To fix CVE-2023-5626, it is recommended to update to version 3.3.0-16 or higher of SFU Open Journal System (OJS).