DamiCMS Cross-site Request Forgery Vulnerability (CNVD-2022-02728)

A security vulnerability exists in DamiCMS v6.0, which originates from the lack of cookie protection in /damicms-master/admin.php?s=/Article/doedit, and could be exploited to compromise and impersonate a user’s account by obtaining their session cookie. session cookie to compromise and impersonate the user’s account.