PT-2020-10334
CVE-2019-20077
·
Published
2020-01-05
·
Updated
2020-01-09
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions
The Typesetter CMS version 5.1
Description
The issue affects the logout functionality of the admin panel in The Typesetter CMS, where the logout function is not protected by any CSRF tokens. This allows an attacker to potentially logout a user.
Recommendations
For version 5.1, consider implementing CSRF tokens to protect the logout function of the admin panel as a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾