CVE-2023-5898

CVE-2023-5898 is a High severity Cross-Site Request Forgery (CSRF) vulnerability affecting pkp/pkp-lib prior to version 3.3.0-16. This flaw allows an unauthenticated attacker to potentially trigger high impact to confidentiality, integrity, and availability if a user is tricked into clicking a malicious link. The vulnerability has a CVSS score of 8.8, indicating a high risk due to its network-based attack vector and low attack complexity, requiring user interaction. There is currently no evidence of active exploitation, nor are there publicly available exploit tools like Metasploit or Nuclei modules. Community discussion and media coverage for this CVE are minimal.