Lucene search
MitreCVELIST:CVE-2023-37131HistoryJul 06, 2023 - 12:00 a.m.
CVE-2023-37131
2023-07-0600:00:00
mitre
www.cve.org
1
cve-2023-37131
cross-site request forgery
yzncms v1.1.0
administrator password
post request
EPSS
0.001
Percentile
24.9%
A Cross-Site Request Forgery (CSRF) in the component /public/admin/profile/update.html of YznCMS v1.1.0 allows attackers to arbitrarily change the Administrator password via a crafted POST request.
References
Related
cve
cve
CVE-2023-37131
2023-07-06 15:15:16
prion
prion
Cross site request forgery (csrf)
2023-07-06 15:15:00
nvd
nvd
CVE-2023-37131
2023-07-06 15:15:16