ThinkCMF Cross Site Request Forgery (CSRF) vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-40489 · ADVISORY
• thinkcmf/thinkcmf · WEB
• thinkcmf/thinkcmf commit 321faa2 · WEB
• thinkcmf/thinkcmf commit b616361 · WEB
• thinkcmf/thinkcmf · PACKAGE

Lỗ hổng khác của thinkcmf/thinkcmf

• CVE-2020-25915TRUNG BÌNH 5.4Cross Site Scripting (XSS) vulnerability in UserController.php in ThinkCMF version 5.1.5, allows attackers to execute arbitrary code via cra…
• CVE-2022-40849TRUNG BÌNH 5.4ThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting (XSS). An attacker who successfully exploited this vulnerability could inj…
• CVE-2021-40616TRUNG BÌNH 6.5thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the b…
• CVE-2020-18151TRUNG BÌNH 6.5Cross Site Request Forgery (CSRF) vulnerability in ThinkCMF v5.1.0, which can add an admin account.