Описание
ThinkCMF Cross Site Request Forgery (CSRF) vulnerability
ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.
Пакеты
Наименование
thinkcmf/thinkcmf
composer
Затронутые версииВерсия исправления
< 6.0.8
6.0.8
Связанные уязвимости
CVSS3: 8.8
nvd
около 3 лет назад
ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.