CVE-2018-15846

Опубликовано: 25 авг. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

An issue was discovered in fledrCMS through 2014-02-03. There is a CSRF vulnerability that can change the administrator's password via index.php?p=done&savedata=1.

Ссылки

https://github.com/mattiapazienti/fledrCMS/issues/2
Issue Tracking
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/148992
Third Party Advisory
VDB Entry
https://github.com/mattiapazienti/fledrCMS/issues/2
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fledrcms_project:fledrcms:*:*:*:*:*:*:*:*

Версия до 2014-02-03 (включая)

EPSS

Процентиль: 33%

0.00133

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-r84w-ppw7-p443