Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...

CVE-2021-33396

Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...

CVE-2021-33396

The CVE-2021-33396 entry describes a CSRF vulnerability in BaijiaCMS 4.1.4 that allows an attacker to change the password or other data of an arbitrary account via index.php. The root cause is CSRF in the account-management flow; impact is high for integrity (unauthorized changes) with no confide...