PT-2021-10883
CVE-2020-23342
·
تاريخ النشر
2021-01-19
·
تاريخ التحديث
2021-05-03
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Anchor CMS version 0.12.7
Description
A CSRF issue exists in the anchor/views/users/edit.php file of Anchor CMS, allowing the deletion of admin users.
Recommendations
For Anchor CMS version 0.12.7, consider disabling the edit user functionality in the anchor/views/users/edit.php file until a patch is available. Restrict access to the
anchor/views/users/edit.php file to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾