PT-2021-24183
CVE-2021-44942
·
تاريخ النشر
2021-12-14
·
تاريخ التحديث
2021-12-15
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
glFusion CMS version 1.7.9
Description:
The issue concerns a Cross Site Request Forgery (CSRF) vulnerability. This vulnerability is located in the "/public html/admin/plugins/bad behavior2/blacklist.php" endpoint. An attacker can exploit this vulnerability to trick an administrator into adding a blacklist entry by getting them to click on a malicious link.
Recommendations:
For glFusion CMS version 1.7.9, as a temporary workaround, consider restricting access to the "/public html/admin/plugins/bad behavior2/blacklist.php" endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾