PT-2020-16259
CVE-2020-25985
·
تاريخ النشر
2020-10-07
·
تاريخ التحديث
2020-10-07
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions
MonoCMS Blog version 1.0
Description
The issue allows any authenticated user to delete files on and off the web server. It's noted that php files can be unlinked and not deleted.
Recommendations
For MonoCMS Blog version 1.0, consider restricting file deletion capabilities to only authorized users until a fix is available. As a temporary workaround, restrict access to sensitive files and directories to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾