CVE-2017-8101

Name of the Vulnerable Software and Affected Versions Serendipity version 2.0.5

Description The issue allows attackers to perform a Cross-Site Request Forgery (CSRF) attack, enabling them to install any themes via a GET request.

Recommendations For Serendipity version 2.0.5, consider restricting access to theme installation functionality until a patch is available. As a temporary workaround, avoid using GET requests for theme installations to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.