exploitDog

CVE-2021-44942

Опубликовано: 14 дек. 2021

Источник: nvd

CVSS3: 4.3

CVSS2: 4.3

EPSS Низкий

Описание

glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery (CSRF) vulnerability in /public_html/admin/plugins/bad_behavior2/blacklist.php. Using the CSRF vulnerability to trick the administrator to click, an attacker can add a blacklist.

Ссылки

https://github.com/glFusion/glfusion/issues/486
Exploit
Issue Tracking
Third Party Advisory
https://github.com/glFusion/glfusion/issues/486
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:glfusion:glfusion:1.7.9:*:*:*:*:*:*:*

EPSS

Процентиль: 28%

0.00098

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-6xx3-7c4w-v79g

github

около 4 лет назад

glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery (CSRF) vulnerability in /public_html/admin/plugins/bad_behavior2/blacklist.php. Using the CSRF vulnerability to trick the administrator to click, an attacker can add a blacklist.

EPSS

Процентиль: 28%

0.00098

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352