CVE-2023-5893: Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-5893?
CVE-2023-5893 is a Cross-Site Request Forgery (CSRF) vulnerability in the GitHub repository pkp/pkp-lib prior to version 3.3.0-16 of the Sfu Pkp Web Application Library.
How severe is CVE-2023-5893?
CVE-2023-5893 has a severity level of 8.8, which is considered high.
What is Cross-Site Request Forgery (CSRF)?
Cross-Site Request Forgery (CSRF) is an attack that tricks the victim into submitting a malicious request on behalf of the attacker without their knowledge or consent.
How can I fix CVE-2023-5893?
To fix CVE-2023-5893, update the pkp/pkp-lib repository to version 3.3.0-16 or later of the Sfu Pkp Web Application Library.
Where can I find more information about CVE-2023-5893?
You can find more information about CVE-2023-5893 at the following references: [Huntr](https://huntr.com/bounties/a965aa16-79ce-4185-8f58-3d3b0d74a71e) and [GitHub commit](https://github.com/pkp/pkp-lib/commit/992ca674e9fb705751b1cbf929a1856ebe29b30a).