CVE-2018-17102

Опубликовано: 16 сент. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

An issue was discovered in QuickAppsCMS (aka QACMS) through 2.0.0-beta2. A CSRF vulnerability can change the administrator password via the user/me URI.

Ссылки

https://github.com/quickapps/cms/issues/187
Exploit
Third Party Advisory
https://github.com/quickapps/cms/issues/199
Exploit
Third Party Advisory
https://github.com/quickapps/cms/issues/187
Exploit
Third Party Advisory
https://github.com/quickapps/cms/issues/199
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:quickappscms:quickapps_cms:*:*:*:*:*:*:*:*

Версия до 1.1.2 (включая)

cpe:2.3:a:quickappscms:quickapps_cms:2.0.0:beta1:*:*:*:*:*:*

cpe:2.3:a:quickappscms:quickapps_cms:2.0.0:beta2:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00141

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-3p9v-xp6w-wcmc