exploitDog

CVE-2017-6918

Опубликовано: 15 мар. 2017

Источник: nvd

CVSS3: 4.3

CVSS2: 4.3

EPSS Низкий

Описание

CSRF exists in BigTree CMS 4.2.16 with the value[#][*] parameter to the admin/settings/update/ page. The Navigation Social can be changed.

Ссылки

https://github.com/bigtreecms/BigTree-CMS/files/843734/BigTree.-.Multiple.Issue.of.CSRF.that.could.Illegally.Few.Data.Changes.v02.pdf
Exploit
Technical Description
Third Party Advisory
https://github.com/bigtreecms/BigTree-CMS/issues/275
Patch
Vendor Advisory
https://github.com/bigtreecms/BigTree-CMS/files/843734/BigTree.-.Multiple.Issue.of.CSRF.that.could.Illegally.Few.Data.Changes.v02.pdf
Exploit
Technical Description
Third Party Advisory
https://github.com/bigtreecms/BigTree-CMS/issues/275
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:bigtreecms:bigtree_cms:4.2.16:*:*:*:*:*:*:*

EPSS

Процентиль: 31%

0.00119

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-g35c-w649-hxgf

CVSS3: 4.3

github

больше 3 лет назад

CSRF exists in BigTree CMS 4.2.16 with the value[#][*] parameter to the admin/settings/update/ page. The Navigation Social can be changed.

EPSS

Процентиль: 31%

0.00119

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352