PT-2021-10883
CVE-2020-23342
·
Published
2021-01-19
·
Updated
2021-05-03
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Anchor CMS version 0.12.7
Description
A CSRF issue exists in the anchor/views/users/edit.php file of Anchor CMS, allowing the deletion of admin users.
Recommendations
For Anchor CMS version 0.12.7, consider disabling the edit user functionality in the anchor/views/users/edit.php file until a patch is available. Restrict access to the
anchor/views/users/edit.php file to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾