PT-2023-18728 · Tiki · Tiki

CVE-2023-22852

Published

2023-01-14

Updated

2023-01-23

CVSS v3.1

6.5

Medium

Vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Tiki versions prior to 25.0

Description The issue allows for CSRF attacks related to tiki-importer.php and tiki-import sheet.php.

Recommendations For versions prior to 25.0, update to version 25.0 or later to resolve the issue.

Exploit

Fix

CSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2023-22852

Tiki