CVE-2020-36389

In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form allows CSRF.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:civicrm:civicrm:*:*:*:*:extended_security_release:*:*:*
cpe:2.3:a:civicrm:civicrm:*:*:*:*:-:*:*:*

Information

Published : 2021-06-17 12:15

Updated : 2023-02-03 11:12


NVD link : CVE-2020-36389

Mitre link : CVE-2020-36389


JSON object : View

CWE
CWE-352

Cross-Site Request Forgery (CSRF)

Advertisement

dedicated server usa

Products Affected

civicrm

  • civicrm