CVE-2017-5476 in Serendipity
Summary
Serendipity through 2.0.5 allows CSRF for the installation of an event plugin or a sidebar plugin.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
01/13/2017
Disclosure
01/14/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 95346 | Serendipity Event Plugin/Sidebar Plugin cross-site request forgery | 352 | Not defined | Official fix | CVE-2017-5476 |