Cross site request forgery (csrf)

2021-03-1014:15:00

PRIOn knowledge base

www.prio-n.com

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.2%

FUEL CMS 1.4.13 contains a cross-site request forgery (CSRF) vulnerability that can delete a page via a post ID to /pages/delete/3.

CPENameOperatorVersion
fuel_cmseq1.4.13

CPE	Name	Operator	Version
	fuel_cms	eq	1.4.13

References

github.com/daylightstudio/FUEL-CMS/commit/fbf2d59215800f05d4359e8f984d5680d62f0f3b

github.com/daylightstudio/FUEL-CMS/issues/576