Approved changes feed: RSS · Atom

cpe:2.3:a:pagekit:pagekit:1.0.17:*:*:*:*:*:*:*

part: a version: 1.0.17 update: *

VendorPagekit (b1670d8d-887f-54d6-b8d5-1ff7a0a706e6)
ProductPagekit (1b5690b8-384c-542a-a58d-3a29d04cb066)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/pagekit/pagekit purl2cpe 2026-06-01 10:17:36.174838
pkg:github/pagekit/pagekit purl2cpe 2026-06-01 10:17:36.174839
pkg:sourceforge/pagekit.mirror purl2cpe 2026-06-01 10:17:36.174841

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-19013 vulnerable 2026-06-08 05:13:21.322165 Details available
A CSRF vulnerability in Pagekit 1.0.17 allows an attacker to upload an arbitrary file by removing the CSRF token from a request.
Published: 2019-11-22T15:55:19.000Z
Updated: 2024-08-05T02:02:39.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16669 vulnerable 2026-06-08 05:13:09.118010 Details available
The Reset Password feature in Pagekit 1.0.17 gives a different response depending on whether the e-mail address of a valid user account is entered, which might make it easier for attackers to enumerate accounts.
Published: 2019-09-21T18:41:39.000Z
Updated: 2024-08-05T01:17:41.142Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.