CVE-2021-46028

2022-01-2000:15:08

Google

osv.dev

csrf vulnerability

mblog

article management

software

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

28.1%

JSON

In mblog <= 3.5.0 there is a CSRF vulnerability in the background article management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, the article will be deleted.

References

github.com/langhsu/mblog/issues/50