Vendor

Lektor

1 brief RSS

Cross-Site Request Forgery in Lektor Admin API

Lektor versions 3.3.14 and 3.4.0b15 are vulnerable to CSRF in the admin API, allowing unauthenticated attackers to perform state-changing operations via malicious web pages.

Lektor web-application-vulnerability csrf lfi

1r 1c 1w ago