En resumen
- CVE-2021-40616 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a thinkcmf/thinkcmf, thinkcmf (thinkcmf).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.77%, mayor que el 55.8% de las vulnerabilidades.
- Solución: actualizar a 6.0.0 o posterior.
Description
thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required.
NVD description
thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required.
Más vulnerabilidades de thinkcmf/thinkcmf
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free