PT-2021-11583
CVE-2020-28846
·
تاريخ النشر
2021-08-17
·
تاريخ التحديث
2021-08-25
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
SeaCMS version 10.7
Description:
A Cross Site Request Forgery (CSRF) issue exists in the admin manager.php file, which could allow a malicious user to add an admin account. This could potentially lead to unauthorized access and control of the system.
Recommendations:
For SeaCMS version 10.7, consider disabling access to the admin manager.php file until a patch is available to prevent exploitation of the CSRF vulnerability. Restricting access to this file can help minimize the risk of adding unauthorized admin accounts.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾