Intel

AIKIDO-2024-10305

kevinpapst/tabler-bundle is vulnerable to Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Oct 1, 2024

18

Low Risk

This Affects:

phpkevinpapst/tabler-bundle
0.1 - 1.5.1
Fixed in 1.5.2
Are you affected? Scan for Free

TL;DR

Affected versions of the package are vulnerable to Cross-Site Request Forgery (CSRF) on the password reset page.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

kevinpapst/tabler-bundle is vulnerable to Cross-Site Request Forgery (CSRF) in versions 0.1 - 1.5.1.

How to fix this

Upgrade the kevinpapst/tabler-bundle library to the patch version.