What is GHSA-f99g-pg48-wrfc?

GHSA-f99g-pg48-wrfc is a security advisory published by GitHub Security Advisories with Medium severity. twill is vulnerable to Cross-Site Request Forgery (CSRF)

Which CVE IDs does GHSA-f99g-pg48-wrfc cover?

GHSA-f99g-pg48-wrfc covers the following CVE IDs: CVE-2021-3932. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f99g-pg48-wrfc?

GHSA-f99g-pg48-wrfc has a CVSS v3 base score of 6.3, published by GitHub Security Advisories.

Which products are affected by GHSA-f99g-pg48-wrfc?

GHSA-f99g-pg48-wrfc affects 2 products, including: composer/area17/twill:\u003c 1.2.5; composer/area17/twill:\u003e= 2.0.0, \u003c 2.5.3.

GHSA-f99g-pg48-wrfcMediumCVSS 6.3

twill is vulnerable to Cross-Site Request Forgery (CSRF)

Vendor

GitHub Security Advisories

Published

November 15, 2021

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-3932 →

📋 Description

twill is vulnerable to Cross-Site Request Forgery (CSRF).

🎯 Affected products2

composer/area17/twill:< 1.2.5
composer/area17/twill:>= 2.0.0, < 2.5.3

🔗 References (8)

https://nvd.nist.gov/vuln/detail/CVE-2021-3932
https://github.com/area17/twill/commit/81d80d1fbbdd8bb73c020f03c623fd4487bd9b78
https://huntr.dev/bounties/6ef21e34-f6d9-445a-b657-375c53dc2b43
https://github.com/area17/twill/commit/5cded9fc
https://github.com/area17/twill/commits/bab94c1e
https://github.com/area17/twill/releases/tag/1.2.5
https://github.com/area17/twill/releases/tag/2.5.3
https://github.com/advisories/GHSA-f99g-pg48-wrfc