adam/Piwigo
1
0 Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-10-30 21:52:00 +01:00
Code Issues 657 Packages Projects Releases Wiki Activity

About vulnerabiliy #1649

New Issue
Closed
opened 2026-10-05 00:51:33 +02:00 by adam · 1 comment
adam commented 2026-10-05 00:51:33 +02:00
Owner
Copy link
Copy source

Hi,
Since one year my personal galery is accessible on internet via a https server. Certificat done with let's encrypt.
I tested one year about vulnerability, and I tested again today.
some fixes are at my hand, some not. I think the two below are for piwigo team.
-No Anti-CSRF tokens were found in a HTML submission form
-The identified library jquery, version 1.11.3 is vulnerable.

Websites used:
-https://hostedscan.com
-https://securityheaders.com/

I found several issues opens but no answer for some.
Thank you for your attention

Hi, Since one year my personal galery is accessible on internet via a https server. Certificat done with let's encrypt. I tested one year about vulnerability, and I tested again today. some fixes are at my hand, some not. I think the two below are for piwigo team. -No Anti-CSRF tokens were found in a HTML submission form -The identified library jquery, version 1.11.3 is vulnerable. Websites used: -https://hostedscan.com -https://securityheaders.com/ I found several issues opens but no answer for some. Thank you for your attention <!-- github-sync-id:1642024650 -->
adam closed this issue 2026-10-05 00:51:33 +02:00
adam commented 2026-10-05 00:51:34 +02:00
Author
Owner
Copy link
Copy source

got message from github saying errors ... / sorry

got message from github saying errors ... / sorry <!-- github-comment-id:1485074863 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#1649