CVE Catalog
CVE-2018-14519
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.41%
33th percentile - higher than 33% of all known CVEs
Summary
In Kirby 2.5.12, a CSRF vulnerability was found in the delete page functionality. A remote attacker can craft a malicious CSRF page and force the user to delete a page.
Risk Assessment
The risk involves unauthorized page deletion by an attacker, potentially leading to content loss and service disruption.
Recommendation
Immediately update Kirby to the latest version and implement CSRF tokens for all sensitive operations.
Original NVD description (English source)
An issue was discovered in Kirby 2.5.12. The delete page functionality suffers from a CSRF flaw. A remote attacker can craft a malicious CSRF page and force the user to delete a page.