PT-2021-24184

CVE-2021-44948

·

Published

2021-12-14

·

Updated

2021-12-30

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Name of the Vulnerable Software and Affected Versions: glFusion CMS version 1.7.9
Description: The issue is related to a Cross Site Request Forgery (CSRF) vulnerability. This vulnerability is located in the /public html/admin/plugins/bad behavior2/blacklist.php endpoint. An attacker can exploit this issue to trick an administrator into adding a blacklist by getting them to click on a malicious link.
Recommendations: For glFusion CMS version 1.7.9, as a temporary workaround, consider restricting access to the /public html/admin/plugins/bad behavior2/blacklist.php endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
CVE-2021-44948
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com