Описание
Cross Site Request Forgery (CSRF) vulnerability was discovered in CatfishCMS 4.8.63 that would allow attackers to obtain administrator permissions via /index.php/admin/index/modifymanage.html.
Ссылки
- ExploitIssue Tracking
- ExploitIssue Tracking
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:catfishcms_project:catfishcms:4.8.63:*:*:*:*:*:*:*
EPSS
Процентиль: 12%
0.00039
Низкий
6.8 Medium
CVSS3
Дефекты
CWE-352
Связанные уязвимости
CVSS3: 6.8
github
больше 2 лет назад
Cross Site Request Forgery (CSRF) vulnerability was discovered in CatfishCMS 4.8.63 that would allow attackers to obtain administrator permissions via /index.php/admin/index/modifymanage.html.
EPSS
Процентиль: 12%
0.00039
Низкий
6.8 Medium
CVSS3
Дефекты
CWE-352