← All advisories

High severity8.8NVD Advisory· Published Jul 7, 2019· Updated Jun 17, 2026

CVE-2019-13183

CVE-2019-13183

Description

Flarum before 0.1.0-beta.9 allows CSRF against all POST endpoints, as demonstrated by changing admin settings.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14

Flarum/Flarum13 versions
cpe:2.3:a:flarum:flarum:0.1.0:-:*:*:*:*:*:*+ 12 more
- cpe:2.3:a:flarum:flarum:0.1.0:-:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta3:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta4:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta5:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta6:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta7.1:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta7.2:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta7:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta8.1:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta8.2:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta8:*:*:*:*:*:*
- (no CPE)range: <0.1.0-beta.9
Flarum/Flarumdescription

Patches

Vulnerability mechanics

References

3

discuss.flarum.org/d/20606-flarum-0-1-0-beta-9-releasednvdRelease NotesVendor Advisory
github.com/flarum/core/blob/master/CHANGELOG.mdnvdRelease NotesThird Party Advisory
github.com/flarum/core/security/advisories/GHSA-3wjh-93gr-chh6nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.