PT-2020-17312
CVE-2020-35347
·
تاريخ النشر
2020-12-26
·
تاريخ التحديث
2020-12-28
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
CXUUCMS V3 version 3.1
Description
The issue allows an attacker to add an administrator account via a CSRF vulnerability. This can be exploited through the "admin.php?c=adminuser&a=add" endpoint.
Recommendations
For CXUUCMS V3 version 3.1, as a temporary workaround, consider restricting access to the "admin.php?c=adminuser&a=add" endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾