CVE-2020-25453

An issue was discovered in BlackCat CMS before 1.4. There is a CSRF vulnerability bypass csrftoken that allows remote arbitrary code execution...

CVE-2020-25453

CVE-2020-25453 affects BlackCat CMS prior to v1.4. It describes a CSRF token bypass vulnerability that enables remote arbitrary code execution. Multiple sources (NVD, Red Hat, OSV, ExploitDB, CVE listings) confirm the issue exists and provide a PoC/exploit context for BlackCat CMS 1.3.6. No offic...