Cross site request forgery (csrf)

2022-06-1013:15:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.9%

A Cross Site Request Forgery (CSRF) vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via a POST call to /fuel/sitevariables/delete/4.

CPENameOperatorVersion
fuel_cmseq1.5.0

CPE	Name	Operator	Version
	fuel_cms	eq	1.5.0

References

github.com/warmachine-57/CVE-2021-44117/blob/main/CSRF%20in%20FuelCMS

www.getfuelcms.com/