PT-2023-11497 · Unknown · Catfish Cms

Godepic

·

CVE-2020-18409

·

Published

2023-06-27

·

Updated

2023-07-06

CVSS v3.1

6.8

Medium

VectorAV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions CatfishCMS version 4.8.63
Description A Cross Site Request Forgery (CSRF) issue was found that could allow attackers to gain administrator permissions. The issue is related to the "/index.php/admin/index/modifymanage.html" API endpoint.
Recommendations For CatfishCMS version 4.8.63, update to a version that includes a fix for this issue, as no specific workaround is provided for this version.

Exploit

Fix

CSRF

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2020-18409

Affected Products

Catfish Cms