← All advisories

High severity8.8NVD Advisory· Published Nov 22, 2019· Updated Jun 17, 2026

CVE-2019-19013

CVE-2019-19013

Description

A CSRF vulnerability in Pagekit 1.0.17 allows an attacker to upload an arbitrary file by removing the CSRF token from a request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
pagekit/pagekitPackagist	<= 1.0.17	—

Affected products

3

Pagekit/Pagekit
cpe:2.3:a:pagekit:pagekit:1.0.17:*:*:*:*:*:*:*
Pagekit/Pagekitdescription
ghsa-coords
pkg:composer/pagekit/pagekit
Range: <= 1.0.17

Patches

Vulnerability mechanics

References

4

packetstormsecurity.com/files/155426/Pagekit-CMS-1.0.17-Cross-Site-Request-Forgery.htmlnvdExploitThird Party AdvisoryVDB EntryWEB
github.com/advisories/GHSA-692x-89xv-64jxghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-19013ghsaADVISORY
gitlab.com/gitlab-org/security-products/gemnasium-db/-/commit/fdf885ccf7c57c69f4d256bbb3ec76a927267a2bghsaWEB

News mentions

0

No linked articles in our index yet.