Описание
Poor cryptographic salt initialization in admin/inc/template_functions.php in GetSimple CMS 3.3.13 allows a network attacker to escalate privileges to an arbitrary user or conduct CSRF attacks via calculation of a session cookie or CSRF nonce.
Ссылки
- Issue TrackingVendor Advisory
- Issue TrackingVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:cagintranetworks:getsimple_cms:3.3.13_:*:*:*:*:*:*:*
EPSS
Процентиль: 57%
0.00351
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-338
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
Poor cryptographic salt initialization in admin/inc/template_functions.php in GetSimple CMS 3.3.13 allows a network attacker to escalate privileges to an arbitrary user or conduct CSRF attacks via calculation of a session cookie or CSRF nonce.
EPSS
Процентиль: 57%
0.00351
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-338