CVE-2021-36569 CSRF vuln in FUEL-CMS 1.4.13 allows remote code execution
Reporter | Title | Published | Views | Family All 5 |
---|---|---|---|---|
![]() | CVE-2021-36569 | 3 Feb 202300:00 | – | vulnrichment |
![]() | CVE-2021-36569 | 3 Feb 202300:00 | – | cvelist |
![]() | Cross site request forgery (csrf) | 3 Feb 202318:15 | – | prion |
![]() | CVE-2021-36569 | 3 Feb 202318:15 | – | nvd |
![]() | CVE-2021-36569 | 3 Feb 202318:15 | – | osv |
Source | Link |
---|---|
github | www.github.com/daylightstudio/FUEL-CMS/issues/578 |
Parameter | Position | Path | Description | CWE |
---|---|---|---|---|
post ID | request body | /users/delete/2 | Cross Site Request Forgery vulnerability in FUEL-CMS allows remote attackers to run arbitrary code. | CWE-352 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo