Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cw3v-mxv2-589m

Опубликовано: 29 янв. 2022
Источник: github
Github: Не прошло ревью

Описание

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily delete user accounts via /admin/admin_manage/delete.

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily delete user accounts via /admin/admin_manage/delete.

EPSS

Процентиль: 45%
0.00229
Низкий

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 6.5
nvd
около 4 лет назад

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily delete user accounts via /admin/admin_manage/delete.

EPSS

Процентиль: 45%
0.00229
Низкий

Дефекты

CWE-352