What is GHSA-9236-8w7q-rmrv?

GHSA-9236-8w7q-rmrv is a security advisory published by GitHub Security Advisories with Medium severity. archivy is vulnerable to Cross-Site Request Forgery (CSRF)

Which CVE IDs does GHSA-9236-8w7q-rmrv cover?

GHSA-9236-8w7q-rmrv covers the following CVE IDs: CVE-2021-4162. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9236-8w7q-rmrv?

GHSA-9236-8w7q-rmrv has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-9236-8w7q-rmrv?

GHSA-9236-8w7q-rmrv affects 1 product, including: pip/archivy:\u003c 1.6.2.

GHSA-9236-8w7q-rmrvMediumCVSS 4.3

archivy is vulnerable to Cross-Site Request Forgery (CSRF)

Vendor

GitHub Security Advisories

Published

January 6, 2022

Last Modified

September 12, 2024

🔗 CVE IDs covered (1)

CVE-2021-4162 →

📋 Description

archivy is vulnerable to Cross-Site Request Forgery (CSRF). There is a fix available in the master branch.

🎯 Affected products1

pip/archivy:< 1.6.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2021-4162
https://github.com/archivy/archivy/commit/796c3ae318eea183fc88c87ec5a27355b0f6a99d
https://huntr.dev/bounties/e204a768-2129-4b6f-abad-e436309c7c32
https://github.com/archivy/archivy/releases/tag/v1.6.2
https://github.com/advisories/GHSA-9236-8w7q-rmrv
https://github.com/pypa/advisory-database/tree/main/vulns/archivy/PYSEC-2021-869.yaml