Security Advisory

CVE-2020-36389

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-06-17 00:00:00
Last updated 2024-08-04 17:23:10
Assigner mitre
State PUBLISHED

Description

In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form allows CSRF.