silverstripeCMS Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2019-12437 - Vulnerability Database

silverstripeCMS Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2019-12437

High

Reference: CVE-2019-12437

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-12437

Title: silverstripeCMS Cross-Site Request Forgery (CSRF) Vulnerability

Overview:

In SilverStripe through 4.3.3 the previous fix for SS-2018-007 does not completely mitigate the risk of CSRF in GraphQL mutations