exploitDog

CVE-2018-17070

Опубликовано: 15 сент. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in UNL-CMS 7.59. A CSRF attack can update the website settings via ?q=admin%2Fconfig%2Fsystem%2Fsite-information&render=overlay&render=overlay.

Ссылки

https://github.com/unlcms/UNL-CMS/issues/941
Exploit
Issue Tracking
Third Party Advisory
https://github.com/unlcms/UNL-CMS/issues/941
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:unlcms:unlcms:7.59:*:*:*:*:*:*:*

EPSS

Процентиль: 28%

0.00098

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-qhw2-98f6-f8r6

CVSS3: 6.5

github

больше 3 лет назад

An issue was discovered in UNL-CMS 7.59. A CSRF attack can update the website settings via ?q=admin%2Fconfig%2Fsystem%2Fsite-information&render=overlay&render=overlay.

EPSS

Процентиль: 28%

0.00098

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352