exploitDog

GHSA-26m8-33mx-qgcj

Опубликовано: 01 мар. 2024

Источник: github

Github: Не прошло ревью

CVSS3: 6.3

Описание

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /save_settings.php

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /save_settings.php

Ссылки

EPSS

Процентиль: 13%

0.00225

Низкий

6.3 Medium

CVSS3

CVE ID

Дефекты

CWE-352

Связанные уязвимости

CVE-2024-27559

CVSS3: 6.3

nvd

больше 2 лет назад

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /save_settings.php

EPSS

Процентиль: 13%

0.00225

Низкий

6.3 Medium

CVSS3

CVE ID

Дефекты

CWE-352