CVE-2020-23264

2021-05-0622:15:07

Google

osv.dev

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.0%

JSON

Cross-site request forgery (CSRF) in Fork-CMS before 5.8.2 allow remote attackers to hijack the authentication of logged administrators.

CPENameOperatorVersion
forkcmseq2.4.2
forkcmseq4.1.0
forkcmseq3.5.0
forkcmseq3.3.4
forkcmseq3.4.4
forkcmseq3.1.8
forkcmseq3.3.7
forkcmseq2.1.0
forkcmseq3.2.3
forkcmseq2.6.5

Name	Operator	Version
forkcms	eq	2.4.2
forkcms	eq	4.1.0
forkcms	eq	3.5.0
forkcms	eq	3.3.4
forkcms	eq	3.4.4
forkcms	eq	3.1.8
forkcms	eq	3.3.7
forkcms	eq	2.1.0
forkcms	eq	3.2.3
forkcms	eq	2.6.5

Rows per page:

1-10 of 1451

References

github.com/forkcms/forkcms/pull/3123