Cross site request forgery (csrf)

2018-08-2521:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

An issue was discovered in Flexo CMS v0.1.6. There is a CSRF vulnerability that can add an administrator via /admin/user/add.

CPENameOperatorVersion
flexo_cmseq0.1.6

CPE	Name	Operator	Version
	flexo_cms	eq	0.1.6

References

github.com/flexocms/flexo1.source/issues/25