CVE-2020-5615

2020-08-0401:05:49

jpcert

www.cve.org

cve-2020-5615

cross-site request forgery

remote attackers

AI Score

9.3

Confidence

High

EPSS

0.003

Percentile

65.7%

JSON

Cross-site request forgery (CSRF) vulnerability in [Calendar01] free edition ver1.0.0 and [Calendar02] free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CNA Affected

[
  {
    "product": "[Calendar01] and [Calendar02]",
    "vendor": "PHP Factory",
    "versions": [
      {
        "status": "affected",
        "version": "[Calendar01] free edition ver1.0.0 and [Calendar02] free edition ver1.0.0"
      }
    ]
  }
]