Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q3fx-45f9-q78r

Опубликовано: 16 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.3

Описание

b2evolution 7.2.2 contains a cross-site request forgery vulnerability that allows attackers to modify admin account details without authentication. Attackers can craft a malicious HTML form to submit unauthorized changes to user profiles by tricking victims into loading a specially crafted webpage.

b2evolution 7.2.2 contains a cross-site request forgery vulnerability that allows attackers to modify admin account details without authentication. Attackers can craft a malicious HTML form to submit unauthorized changes to user profiles by tricking victims into loading a specially crafted webpage.

EPSS

Процентиль: 4%
0.00019
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 5.3
nvd
23 дня назад

b2evolution 7.2.2 contains a cross-site request forgery vulnerability that allows attackers to modify admin account details without authentication. Attackers can craft a malicious HTML form to submit unauthorized changes to user profiles by tricking victims into loading a specially crafted webpage.

CVSS3: 5.3
debian
23 дня назад

b2evolution 7.2.2 contains a cross-site request forgery vulnerability ...

EPSS

Процентиль: 4%
0.00019
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-352