CVE-2018-13407: Jirafeau

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

A CSRF issue was discovered in Jirafeau before 3.4.1. The "delete file" feature on the admin panel is not protected against automated requests and could be abused.

Affected products

• Jirafeau Jirafeau: before 3.4.1 (fixed in 3.4.1)

Published 2018-07-06. Last modified 2026-06-17.