PT-2020-10334
CVE-2019-20077
·
تاريخ النشر
2020-01-05
·
تاريخ التحديث
2020-01-09
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions
The Typesetter CMS version 5.1
Description
The issue affects the logout functionality of the admin panel in The Typesetter CMS, where the logout function is not protected by any CSRF tokens. This allows an attacker to potentially logout a user.
Recommendations
For version 5.1, consider implementing CSRF tokens to protect the logout function of the admin panel as a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾