exploitDog

CVE-2019-8902

Опубликовано: 18 фев. 2019

Источник: nvd

CVSS3: 5.7

CVSS2: 4.9

EPSS Низкий

Описание

An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI.

Ссылки

https://github.com/idreamsoft/iCMS/issues/56
Exploit
Issue Tracking
Third Party Advisory
https://github.com/idreamsoft/iCMS/issues/56
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:idreamsoft:icms:*:*:*:*:*:*:*:*

Версия до 7.0.14 (включая)

EPSS

Процентиль: 24%

0.0008

Низкий

5.7 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-xrj4-fxgw-43xg

CVSS3: 5.7

github

больше 3 лет назад

An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI.

EPSS

Процентиль: 24%

0.0008

Низкий

5.7 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-352