Sfu: >> Open Journal System >> 2.2.1-0 Security Vulnerabilities
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16.
CVSS Score
3.5
EPSS Score
0.001
Published
2023-10-18
An issue was discovered in Public Knowledge Project (PKP) pkp-lib before 3.1.2-2, as used in Open Journal Systems (OJS) before 3.1.2-2. Code injection can occur in the OJS report generator if an authenticated Journal Manager user visits a crafted URL, because unserialize is used.
CVSS Score
8.8
EPSS Score
0.009
Published
2019-12-19