Vulnerabilities > SFU > High

DATE CVE VULNERABILITY TITLE RISK
2023-11-01 CVE-2023-5893 Unspecified vulnerability in SFU PKP web Application Library
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
network
low complexity
sfu
8.8
2023-11-01 CVE-2023-5897 Unspecified vulnerability in SFU Customlocale
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/customLocale prior to 1.2.0-1.
network
low complexity
sfu
8.8
2023-10-18 CVE-2023-5626 Unspecified vulnerability in SFU Open Journal System
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16.
network
low complexity
sfu
8.8
2019-12-19 CVE-2019-19909 Deserialization of Untrusted Data vulnerability in SFU Open Journal System
An issue was discovered in Public Knowledge Project (PKP) pkp-lib before 3.1.2-2, as used in Open Journal Systems (OJS) before 3.1.2-2.
network
low complexity
sfu CWE-502
8.8