PT-2021-10583
CVE-2020-21081
·
Published
2021-09-14
·
Updated
2021-09-24
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
Maccms version 8.0
Description:
A cross-site request forgery (CSRF) issue allows attackers to trick administrators into adding and modifying articles without their knowledge by clicking on a crafted URL.
Recommendations:
For Maccms version 8.0, consider implementing measures to validate user requests and ensure that actions are intentionally initiated by administrators, such as using tokens to verify the authenticity of requests. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾