CSRF Vulnerability in Serendipity 2.0.5 Allows Unauthorized Theme Installation

CSRF Vulnerability in Serendipity 2.0.5 Allows Unauthorized Theme Installation

CVE-2017-8101 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request.

Learn more about our Web Application Penetration Testing UK.