Описание
An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows attackers to delete a log file via the index.php?m=admin&c=data&a=clear URI.
Ссылки
- ExploitIssue TrackingThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:greencms:greencms:2.3.0603:*:*:*:*:*:*:*
EPSS
Процентиль: 28%
0.00098
Низкий
6.5 Medium
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-352
Связанные уязвимости
CVSS3: 6.5
github
больше 3 лет назад
An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows attackers to delete a log file via the index.php?m=admin&c=data&a=clear URI.
EPSS
Процентиль: 28%
0.00098
Низкий
6.5 Medium
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-352