Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qr26-w5vf-jf8x

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create categories via a data array to news/saveCategories or (2) modify credentials via a data array to admin/saveUser.

Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create categories via a data array to news/saveCategories or (2) modify credentials via a data array to admin/saveUser.

EPSS

Процентиль: 54%
0.0031
Низкий

Дефекты

CWE-352

Связанные уязвимости

nvd
около 11 лет назад

Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create categories via a data array to news/saveCategories or (2) modify credentials via a data array to admin/saveUser.

EPSS

Процентиль: 54%
0.0031
Низкий

Дефекты

CWE-352