Description
SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack the authentication of administrators via vectors related to "form action requests" using a controller.
Remediation
References
Related Vulnerabilities
WordPress Plugin SKU Shortlink For WooCommerce Arbitrary File Disclosure (1.3.4)
Apache HTTP Server CVE-2013-6438 Vulnerability (CVE-2013-6438)
MyBB Other Vulnerability (CVE-2007-1963)
WordPress Plugin Thrive Clever Widgets Security Bypass (1.56)
Oracle Database Server CVE-2023-22073 Vulnerability (CVE-2023-22073)