Vulnerabilities > SFU > Open Journal System > 2.4.5.0

DATE CVE VULNERABILITY TITLE RISK
2023-10-18 CVE-2023-5626 Cross-Site Request Forgery (CSRF) vulnerability in SFU Open Journal System
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16.
network
low complexity
sfu CWE-352
8.8
8.8
2019-12-19 CVE-2019-19909 Code Injection vulnerability in SFU Open Journal System
An issue was discovered in Public Knowledge Project (PKP) pkp-lib before 3.1.2-2, as used in Open Journal Systems (OJS) before 3.1.2-2.
network
sfu CWE-94
6.8
6.8