PT-2020-15215
CVE-2020-19889
·
تاريخ النشر
2020-08-24
·
تاريخ التحديث
2020-08-26
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
DBHcms version 1.2.0
Description
The issue concerns the lack of a CSRF protection mechanism. This can be demonstrated through a CSRF attack on the "index.php?dbhcms pid=-70" endpoint, which allows adding a user.
Recommendations
For DBHcms version 1.2.0, consider implementing a CSRF protection mechanism to prevent such attacks. As a temporary workaround, restrict access to the "index.php?dbhcms pid=-70" endpoint to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾