Lucene search
+L

3 matches found

Mend
Mend
•added 2022/04/22 7:51 p.m.•1 views

CVE-2022-27340

MCMS v5.2.7 contains a Cross-Site Request Forgery CSRF via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data...

8.8CVSS0.00667EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/04/22 12:00 a.m.•3 views

PT-2022-18383

Name of the Vulnerable Software and Affected Versions MCMS version 5.2.7 Description The issue is related to a Cross-Site Request Forgery CSRF that occurs via the /role/saveOrUpdateRole.do endpoint. This allows attackers to escalate privileges and modify data. Recommendations For MCMS version...

8.8CVSS5.8AI score0.00667EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/22 12:00 a.m.•3 views

CVE-2022-27340: Cross-Site Request Forgery (CSRF)

MCMS v5.2.7 contains a Cross-Site Request Forgery CSRF via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data...

8.8CVSS7.8AI score0.00667EPSS
SaveExploits1References2
Rows per page
Query Builder