exploitDog

CVE-2018-14519

Опубликовано: 24 авг. 2022

Источник: nvd

CVSS3: 4.3

EPSS Низкий

Описание

An issue was discovered in Kirby 2.5.12. The delete page functionality suffers from a CSRF flaw. A remote attacker can craft a malicious CSRF page and force the user to delete a page.

Ссылки

http://zaranshaikh.blogspot.com
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/45090
Exploit
Third Party Advisory
VDB Entry
http://zaranshaikh.blogspot.com
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/45090
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:getkirby:kirby:2.5.12:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00164

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

GHSA-c7x2-7h8r-jq4m

CVSS3: 4.3

github

больше 3 лет назад

Kirby CMS 2.5.12 Cross-site Request Forgery

EPSS

Процентиль: 38%

0.00164

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-352