CVE-2023-40953

icms 7.0.16 is vulnerable to Cross Site Request Forgery CSRF...

CVE-2023-40953

creationtimestamp| type| source ---|---|--- 2023-09-08 07:19:18+00:00| seen| https://t.me/cibsecurity/70125...

CVE-2023-40953

icms 7.0.16 is vulnerable to Cross Site Request Forgery CSRF...

CVE-2023-40953

Affected software: iCMS 7.0.16. Vulnerability: Cross-Site Request Forgery (CSRF). Root cause (per sources): do_save() does not adequately verify that a request originates from a trusted user. Impact (as described): an attacker could forge a malicious request and trick a logged-in user into perfor...