Lucene search
K

CVE-2020-5576

🗓️ 14 May 2020 01:00:22Reported by jpcertType 
cve
 cve
🔗 web.nvd.nist.gov👁 100 Views

CSRF vulnerability in Movable Type versions allowing remote authentication hijacking of administrators.

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
CNVD
Six Apart Movable Type Cross-Site Request Forgery Vulnerability
15 May 202000:00
cnvd
Cvelist
CVE-2020-5576
14 May 202001:00
cvelist
EUVD
EUVD-2020-26738
7 Oct 202500:30
euvd
Japan Vulnerability Notes
JVN#28806943: Multiple vulnerabilities in Movable Type
13 May 202000:00
jvn
Japan Vulnerability Notes
Multiple vulnerabilities in Movable Type
13 May 202008:59
jvn
NVD
CVE-2020-5576
14 May 202002:15
nvd
Prion
Cross site request forgery (csrf)
14 May 202002:15
prion
RedhatCVE
CVE-2020-5576
22 May 202517:42
redhatcve
UbuntuCve
CVE-2020-5576
14 May 202002:15
ubuntucve
NVD
Node
sixapartmovable_typeRange1.29advanced
OR
sixapartmovable_typeRange1.29premium
OR
sixapartmovable_typeRange6.36.3.11-
OR
sixapartmovable_typeRange6.36.3.11advanced
OR
sixapartmovable_typeRange6.5.06.5.3-
OR
sixapartmovable_typeRange6.5.06.5.3advanced
OR
sixapartmovable_typeRange7.07.2.1aws
OR
sixapartmovable_typeRange7.07.2.1-
OR
sixapartmovable_typeRange7.07.2.1advanced
[
  {
    "product": "Movable Type",
    "vendor": "Six Apart Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for AWS 7), Movable Type 6.5.3 and earlier (Movable Type 6.5), Movable Type Advanced 6.5.3 and earlier (Movable Type Advanced 6.5), Movable Type 6.3.11 and earlier (Movable Type 6.3), Movable Type Advanced 6.3.11 and earlier (Movable Type 6.3), Movable Type Premium 1.29 and earlier, and Movable Type Premium Advanced 1.29 and earlier"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:34Current
8.8High risk
Vulners AI Score8.8
CVSS 26.8
CVSS 3.18.8
EPSS0.00149
100