Cross site request forgery (csrf)

2018-11-2021:29:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.4%

JSON

An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows attackers to delete a log file via the index.php?m=admin&c=data&a=clear URI.

CPENameOperatorVersion
greencmseq2.3.0603

CPE	Name	Operator	Version
	greencms	eq	2.3.0603

References

github.com/GreenCMS/GreenCMS/issues/114