292 matches found
CVE-2024-25417
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/addtranslation.php...
CVE-2024-25417: Cross-Site Request Forgery (CSRF)
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/addtranslation.php...
CVE-2024-25417
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/addtranslation.php...
CVE-2024-25418
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deletemenu.php...
CVE-2024-25419
CVE-2024-25419 affects flusity-CMS v2.33 via a Cross-Site Request Forgery (CSRF) in the component /core/tools/update_menu.php. The CVSS 3.1 vectors from the sources indicate a high-severity, high-impact issue (C/H, I/H, A/H) with network attack vector, no privileges required, user interaction req...
CVE-2024-25419
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updatemenu.php...
PT-2024-20931
Name of the Vulnerable Software and Affected Versions flusity-CMS version 2.33 Description The issue is related to a Cross-Site Request Forgery CSRF in the component /core/tools/update menu.php. This allows for unauthorized actions to be performed on behalf of a user. Recommendations For...
CVE-2024-25418
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deletemenu.php...
CVE-2024-25419
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updatemenu.php...
CVE-2024-25419
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updatemenu.php...
CVE-2024-25417
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/addtranslation.php...
CVE-2024-25417
CVE-2024-25417 concerns flusity-CMS v2.33, where a CSRF flaw exists in the /core/tools/add_translation.php component. The vulnerability allows unauthorized actions requiring user interaction, with CVSS v3.1 base score 8.8 (High impact across confidentiality, integrity, and availability; network a...
PT-2024-20930
Name of the Vulnerable Software and Affected Versions flusity-CMS version 2.33 Description A Cross-Site Request Forgery CSRF issue was discovered in the component /core/tools/delete menu.php. This allows for unauthorized actions to be performed on behalf of a user. Recommendations For flusity-CMS...
CVE-2024-25418
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deletemenu.php...
CVE-2024-25418
Summary: CVE-2024-25418 affects flusity-CMS v2.33, with a CSRF vulnerability in the /core/tools/delete_menu.php component. Root cause is CSRF in that endpoint, leading to potential unauthorized actions without user consent. The CVSS v3.1 metrics indicate a High severity (8.8) with network attack ...
CVE-2024-25419
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updatemenu.php...
CVE-2024-25419: Cross-Site Request Forgery (CSRF)
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updatemenu.php...
CVE-2024-25417
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/addtranslation.php...
