Количество 3
Количество 3
CVE-2021-47800
b2evolution 7.2.2 contains a cross-site request forgery vulnerability that allows attackers to modify admin account details without authentication. Attackers can craft a malicious HTML form to submit unauthorized changes to user profiles by tricking victims into loading a specially crafted webpage.
CVE-2021-47800
b2evolution 7.2.2 contains a cross-site request forgery vulnerability ...
GHSA-q3fx-45f9-q78r
b2evolution 7.2.2 contains a cross-site request forgery vulnerability that allows attackers to modify admin account details without authentication. Attackers can craft a malicious HTML form to submit unauthorized changes to user profiles by tricking victims into loading a specially crafted webpage.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2021-47800 b2evolution 7.2.2 contains a cross-site request forgery vulnerability that allows attackers to modify admin account details without authentication. Attackers can craft a malicious HTML form to submit unauthorized changes to user profiles by tricking victims into loading a specially crafted webpage. | CVSS3: 5.3 | 0% Низкий | 24 дня назад | |
CVE-2021-47800 b2evolution 7.2.2 contains a cross-site request forgery vulnerability ... | CVSS3: 5.3 | 0% Низкий | 24 дня назад | |
GHSA-q3fx-45f9-q78r b2evolution 7.2.2 contains a cross-site request forgery vulnerability that allows attackers to modify admin account details without authentication. Attackers can craft a malicious HTML form to submit unauthorized changes to user profiles by tricking victims into loading a specially crafted webpage. | CVSS3: 5.3 | 0% Низкий | 24 дня назад |
Уязвимостей на страницу