Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5rx5-jxfp-vv4c

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery (CSRF). When an attacker induces authenticated admin user to a malicious web page, any accounts can be deleted without admin user's intention.

Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery (CSRF). When an attacker induces authenticated admin user to a malicious web page, any accounts can be deleted without admin user's intention.

EPSS

Процентиль: 42%
0.002
Низкий

Связанные уязвимости

CVSS3: 4.3
nvd
больше 5 лет назад

Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery (CSRF). When an attacker induces authenticated admin user to a malicious web page, any accounts can be deleted without admin user's intention.

EPSS

Процентиль: 42%
0.002
Низкий