3 matches found
CVE-2022-27340
MCMS v5.2.7 contains a Cross-Site Request Forgery CSRF via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data...
8.8CVSS0.00667EPSS
SaveExploits1References3
PT-2022-18383
Name of the Vulnerable Software and Affected Versions MCMS version 5.2.7 Description The issue is related to a Cross-Site Request Forgery CSRF that occurs via the /role/saveOrUpdateRole.do endpoint. This allows attackers to escalate privileges and modify data. Recommendations For MCMS version...
8.8CVSS5.8AI score0.00667EPSS
SaveExploits1References5
CVE-2022-27340: Cross-Site Request Forgery (CSRF)
MCMS v5.2.7 contains a Cross-Site Request Forgery CSRF via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data...
8.8CVSS7.8AI score0.00667EPSS
SaveExploits1References2
20