PT-2019-18649

CVE-2019-7566

Published

2019-02-07

Updated

2019-02-07

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CSZ CMS version 1.1.8

Description The issue is related to CSRF, which can be exploited via the admin/users/new/add endpoint.

Recommendations For CSZ CMS version 1.1.8, consider implementing proper CSRF protection mechanisms, such as tokens, to prevent exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾