Description
In SilverStripe through 4.3.3, the previous fix for SS-2018-007 does not completely mitigate the risk of CSRF in GraphQL mutations,
Remediation
References
Related Vulnerabilities
Tornado Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2014-9720)
WordPress Plugin HD Quiz Cross-Site Scripting (1.8.3)
WordPress Same Origin Method Execution (SOME) Vulnerability (0.70 - 3.7.13)
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2165)
Internet Information Services Other Vulnerability (CVE-1999-0278)