Lucene search
PRIOn knowledge basePRION:CVE-2020-27379HistoryJul 14, 2021 - 3:15 p.m.
Cross site request forgery (csrf)
2021-07-1415:15:00
PRIOn knowledge base
www.prio-n.com
6
0.001 Low
EPSS
Percentile
21.8%
Cross Site Request Forgery (CSRF) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 . The CSRF token is not being validated when the request is sent as a GET method. This results in an unauthorized change in the user’s email ID, which can later be used to reset the password. The new password will be sent to a modified email ID.
| CPE | Name | Operator | Version |
|---|---|---|---|
| booking_core | eq | 1.7.0 |
Related
cve
cve
CVE-2020-27379
2021-07-14 15:15:08
cvelist
cvelist
CVE-2020-27379
2021-07-14 14:38:17
nvd
nvd
CVE-2020-27379
2021-07-14 15:15:08