CVE-2019-11077

2019-04-1102:29:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.9%

JSON

FastAdmin V1.0.0.20190111_beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI.

CPENameOperatorVersion
fastadmineq0.1.0.20170721_beta
fastadmineq1.0.0.20180406_beta
fastadmineq1.0.0.20180506_beta
fastadmineq1.0.0.20181210_beta
fastadmineq1.0.0.20180308_beta
fastadmineq1.0.0.20180310_beta
fastadmineq1.0.0.20180618_beta
fastadmineq1.0.0.20190111_beta
fastadmineq1.0.0.20180204_beta
fastadmineq1.0.0.20180401_beta

Name	Operator	Version
fastadmin	eq	0.1.0.20170721_beta
fastadmin	eq	1.0.0.20180406_beta
fastadmin	eq	1.0.0.20180506_beta
fastadmin	eq	1.0.0.20181210_beta
fastadmin	eq	1.0.0.20180308_beta
fastadmin	eq	1.0.0.20180310_beta
fastadmin	eq	1.0.0.20180618_beta
fastadmin	eq	1.0.0.20190111_beta
fastadmin	eq	1.0.0.20180204_beta
fastadmin	eq	1.0.0.20180401_beta

Rows per page:

1-10 of 271

References

www.iwantacve.cn/index.php/archives/191/