CVE-2016-10757

Name of the Vulnerable Software and Affected Versions Redaxo version 5.2.0

Description The issue affects the cron management in the admin panel, where a CSRF vulnerability can lead to arbitrary Remote Code Execution. This is achieved through the addons/cronjob/lib/types/phpcode.php file.

Recommendations For Redaxo version 5.2.0, consider disabling access to the addons/cronjob/lib/types/phpcode.php file as a temporary workaround until a patch is available. Restrict access to the cron management feature in the admin panel to minimize the risk of exploitation.