CVE-2017-8082

Summary: Concrete5 CMS 8.1.0 is vulnerable in the File Manager’s Thumbnail Editor due to a cross-site request forgery (CSRF) flaw. The underlying issue allows an attacker to remotely disable the entire installation by tricking an admin into viewing a crafted page containing an image editor reques...