Serendipity Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2017-5476 - Vulnerability Database

Serendipity Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2017-5476

High

Reference: CVE-2017-5476

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-5476

Title: Serendipity Cross-Site Request Forgery (CSRF) Vulnerability

Overview:

Serendipity through 2.0.5 allows CSRF for the installation of an event plugin or a sidebar plugin.