Cross site request forgery (csrf)

2023-02-0318:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

cross site request forgery

fuel-cms 1.4.13

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.7%

Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to /users/delete/2.

CPENameOperatorVersion
fuel_cmseq1.4.13

CPE	Name	Operator	Version
	fuel_cms	eq	1.4.13

References

github.com/daylightstudio/FUEL-CMS/issues/578