PT-2021-16900
CVE-2021-25976
·
تاريخ النشر
2021-11-16
·
تاريخ التحديث
2021-11-17
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions
PiranhaCMS versions 4.0.0-alpha1 through 9.2.0
Description
The issue allows for cross-site request forgery (CSRF) when performing various actions supported by the management system. These actions include deleting a user, deleting a role, editing a post, and deleting a media folder, among others, when an ID is known.
Recommendations
For PiranhaCMS versions 4.0.0-alpha1 through 9.2.0, consider implementing CSRF protection mechanisms, such as token-based validation, to prevent unauthorized actions. As a temporary workaround, restrict access to sensitive management system functions to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾