Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2rv2-xrc4-x25w

Опубликовано: 04 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 5.3

Описание

Maian Support Helpdesk 4.3 contains a cross-site request forgery vulnerability that allows attackers to create administrative accounts without authentication. Attackers can craft malicious HTML forms to add admin users and upload PHP files with unrestricted file upload capabilities through the FAQ attachment system.

Maian Support Helpdesk 4.3 contains a cross-site request forgery vulnerability that allows attackers to create administrative accounts without authentication. Attackers can craft malicious HTML forms to add admin users and upload PHP files with unrestricted file upload capabilities through the FAQ attachment system.

EPSS

Процентиль: 5%
0.00023
Низкий

5.1 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 5.3
nvd
5 дней назад

Maian Support Helpdesk 4.3 contains a cross-site request forgery vulnerability that allows attackers to create administrative accounts without authentication. Attackers can craft malicious HTML forms to add admin users and upload PHP files with unrestricted file upload capabilities through the FAQ attachment system.

EPSS

Процентиль: 5%
0.00023
Низкий

5.1 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-352