CVE-2022-25576: Cross-Site Request Forgery (CSRF)

March 26, 2022 (updated April 5, 2022)

Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component anchor/routes/posts.php. This vulnerability allows attackers to arbitrarily delete posts.

References

github.com/advisories/GHSA-322v-p3jc-7hrg
github.com/anchorcms/anchor-cms
github.com/butterflyhack/anchorcms-0.12.7-CSRF
nvd.nist.gov/vuln/detail/CVE-2022-25576

Code Behaviors & Features

Detect and mitigate CVE-2022-25576 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →