Japan Vulnerability NotesJVN:68640473JVN#68640473 bingo!CMS core and bingo!CMS vulnerable to cross-site request forgery
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
0.002 Low
EPSS
Percentile
61.9%
bingo!CMS core and bingo!CMS are content management systems (CMS). bingo!CMS core and bingo!CMS contain a cross-site request forgery vulnerability.
Impact
If a user views a malicious web page while logged into the CMS, an attacker could modify configurations or modify contents managed by CMS.
Solution
Update the Software
Update to the latest version according to the information provided by the developer.
Products Affected
- bingo!CMS core version 1.2 and earlier
- bingo!CMS (commercial) version 1.2 and earlier
Related
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
0.002 Low
EPSS
Percentile
61.9%