CPE

Cpe:2.3:a:lektor:lektor:3.3.14:::::::*

1 brief RSS

Cross-Site Request Forgery in Lektor Admin API

Lektor versions 3.3.14 and 3.4.0b15 are vulnerable to CSRF in the admin API, allowing unauthenticated attackers to perform state-changing operations via malicious web pages.

Lektor web-application-vulnerability csrf lfi

1r 1c 1w ago

Cpe:2.3:a:lektor:lektor:3.3.14:*:*:*:*:*:*:*

Cross-Site Request Forgery in Lektor Admin API

Cpe:2.3:a:lektor:lektor:3.3.14:::::::*