PT-2022-27207
CVE-2022-44389
·
تاريخ النشر
2022-11-14
·
تاريخ التحديث
2025-04-30
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
EyouCMS version 1.5.9-UTF8-SP1
Description
A Cross-Site Request Forgery (CSRF) issue was discovered in the Edit Admin Profile module, allowing attackers to arbitrarily change Administrator account information.
Recommendations
For EyouCMS version 1.5.9-UTF8-SP1, consider disabling the Edit Admin Profile module until a patch is available to prevent exploitation of the CSRF issue. Restrict access to the Administrator account information to minimize the risk of unauthorized changes.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾