Lucene search

CVE-2020-24271

🗓️ 01 Feb 2021 15:12:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 28 Views🌐 WEB

CSRF vulnerability in EasyCMS v1.6 allows unauthorized admin account creatio

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2020-24271	1 Feb 202114:17	–	cvelist
NVD	CVE-2020-24271	1 Feb 202115:15	–	nvd
CNVD	EasyCMS Cross-Site Request Forgery Vulnerability (CNVD-2021-09498)	2 Feb 202100:00	–	cnvd
Prion	Cross site request forgery (csrf)	1 Feb 202115:15	–	prion
OSV	CVE-2020-24271	1 Feb 202115:15	–	osv

Nvd

Node

easycms easycmsMatch1.6

Source	Link
github	www.github.com/users/yohoho221/projects/1

Parameter	Position	Path	Description	CWE
username	request body	/index.php?s=/admin/rbacuser/insert/navTabId/rbacuser/callbackType/closeCurrent	CSRF vulnerability allows unauthorized users to create an admin account.	CWE-352
password	request body	/index.php?s=/admin/rbacuser/insert/navTabId/rbacuser/callbackType/closeCurrent	CSRF vulnerability allows unauthorized users to create an admin account.	CWE-352

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Feb 2021 15:15Current

8.7High risk

Vulners AI Score8.7

CVSS26.8

CVSS38.8

EPSS0.00145

CWE-352