Lucene search

K
cve[email protected]CVE-2021-29334
HistoryNov 23, 2022 - 8:15 p.m.

CVE-2021-29334

2022-11-2320:15:09
CWE-352
web.nvd.nist.gov
28
5
security
csrf vulnerability
jizhi cms 1.9.4
admin account
nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.3%

An issue was discovered in JIZHI CMS 1.9.4. There is a CSRF vulnerability that can add an admin account via index, /admin.php/Admin/adminadd.html

Affected configurations

NVD
Node
jizhicmsjizhicmsMatch1.9.4
CPENameOperatorVersion
jizhicms:jizhicmsjizhicmseq1.9.4

Social References

More

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.3%

Related for CVE-2021-29334