Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6pg6-qhjj-4wcm

Опубликовано: 03 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

Acora CMS version 10.1.1 is vulnerable to Cross-Site Request Forgery (CSRF). This flaw enables attackers to trick authenticated users into performing unauthorized actions, such as account deletion or user creation, by embedding malicious requests in external content. The lack of CSRF protections allows exploitation via crafted requests.

Acora CMS version 10.1.1 is vulnerable to Cross-Site Request Forgery (CSRF). This flaw enables attackers to trick authenticated users into performing unauthorized actions, such as account deletion or user creation, by embedding malicious requests in external content. The lack of CSRF protections allows exploitation via crafted requests.

EPSS

Процентиль: 48%
0.00251
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8.8
nvd
11 месяцев назад

Acora CMS version 10.1.1 is vulnerable to Cross-Site Request Forgery (CSRF). This flaw enables attackers to trick authenticated users into performing unauthorized actions, such as account deletion or user creation, by embedding malicious requests in external content. The lack of CSRF protections allows exploitation via crafted requests.

EPSS

Процентиль: 48%
0.00251
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-352