Cross site request forgery (csrf)

2023-02-1522:15:00

PRIOn knowledge base

www.prio-n.com

cross site request forgery

baijiacms 4.1.4

index.php

password change

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php.

CPENameOperatorVersion
baijiacmseq4.1.4

CPE	Name	Operator	Version
	baijiacms	eq	4.1.4

References

github.com/baijiacms/baijiacmsV4/issues/7