CVE-2019-16678

admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route...

CVE-2019-16678

CVE-2019-16678 affects YzmCMS 5.3. The issue is a Cross-Site Request Forgery in admin/urlrule/add.html that enables a denial of service via adding a superseding route. The public descriptions consistently state CSRF as the root cause; no explicit exploitation details or in‑the‑wild proof are prov...