Описание
Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component anchor/routes/posts.php. This vulnerability allows attackers to arbitrarily delete posts.
Ссылки
- ProductThird Party Advisory
- ExploitThird Party Advisory
- ProductThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:anchorcms:anchor_cms:0.12.7:*:*:*:*:*:*:*
EPSS
Процентиль: 31%
0.00115
Низкий
4.5 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-352
Связанные уязвимости
EPSS
Процентиль: 31%
0.00115
Низкий
4.5 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-352