← All advisories

Unrated severityNVD Advisory· Published Jun 17, 2021· Updated Aug 4, 2024

CVE-2020-36389

CVE-2020-36389

Description

In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form allows CSRF.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

CiviCRM/CiviCRMdescription
Civicrm/Civicrmllm-fuzzy
Range: <=5.28.1
osv-coords
pkg:bitnami/civicrm
Range: < 5.27.5

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.