CVE-2019-16659

Name of the Vulnerable Software and Affected Versions TuziCMS version 2.0.6

Description The issue concerns a CSRF vulnerability in the index.php/manage/link/do add endpoint. This vulnerability may allow unauthorized actions to be performed.

Recommendations For TuziCMS version 2.0.6, consider implementing proper CSRF protection mechanisms, such as token-based validation, to prevent unauthorized requests to the index.php/manage/link/do add endpoint. At the moment, there is no information about a newer version that contains a fix for this vulnerability.