Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8f45-7v32-jw8m

Опубликовано: 25 апр. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to set a person to a user and set that user to be an Administrator.

A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to set a person to a user and set that user to be an Administrator.

EPSS

Процентиль: 20%
0.00064
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 5.3
nvd
почти 3 года назад

A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to set a person to a user and set that user to be an Administrator.

EPSS

Процентиль: 20%
0.00064
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-352