{"id":"CVE-2017-10678","details":"Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to delete permalinks via a crafted request.","modified":"2026-05-17T12:01:09.511415550Z","published":"2017-06-29T21:29:00.190Z","database_specific":{},"references":[{"type":"WEB","url":"http://www.securityfocus.com/bid/99383"},{"type":"FIX","url":"https://github.com/Piwigo/Piwigo/commit/03a8329b89c0d196ecdb54227a8113f24555ffc0"},{"type":"EVIDENCE","url":"https://github.com/Piwigo/Piwigo/issues/721"}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}