PT-2022-21699
CVE-2022-33121
·
Published
2022-06-24
·
Updated
2022-06-30
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions
MiniCMS version 1.11
Description
A Cross-Site Request Forgery (CSRF) issue allows attackers to arbitrarily delete local .dat files by tricking users into clicking on a malicious link.
Recommendations
For MiniCMS version 1.11, as a temporary workaround, consider implementing strict validation and verification of requests to prevent unauthorized actions until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾