PT-2021-10583

CVE-2020-21081

·

Published

2021-09-14

·

Updated

2021-09-24

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions: Maccms version 8.0
Description: A cross-site request forgery (CSRF) issue allows attackers to trick administrators into adding and modifying articles without their knowledge by clicking on a crafted URL.
Recommendations: For Maccms version 8.0, consider implementing measures to validate user requests and ensure that actions are intentionally initiated by administrators, such as using tokens to verify the authenticity of requests. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾