Cross site request forgery (csrf)

2018-11-1506:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%

JSON

An issue was discovered in DiliCMS 2.4.0. There is a CSRF vulnerability that can delete a user or group via an admin/index.php/user/del/1 or admin/index.php/role/del/2 URI.

CPENameOperatorVersion
dilicmseq2.4.0

CPE	Name	Operator	Version
	dilicms	eq	2.4.0

References

github.com/chekun/DiliCMS/issues/60