Skip to content
Threat Feed
Subscribe

Product

Lektor (3.3.14, 3.4.0b15)

1 brief RSS
medium advisory

Cross-Site Request Forgery in Lektor Admin API

Lektor versions 3.3.14 and 3.4.0b15 are vulnerable to CSRF in the admin API, allowing unauthenticated attackers to perform state-changing operations via malicious web pages.

Lektor web-application-vulnerability csrf lfi
1r 1c