PT-2018-12834 · Weaselcms · Weaselcms

Cgaiideo · Publicado 2018-08-05 · Atualizado 2018-10-04 · CVE-2018-14958

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WeaselCMS version 0.3.5

Description An issue allows CSRF to update website settings, including theme, title, and description, via the "index.php" endpoint.

Recommendations For WeaselCMS version 0.3.5, update to a newer version that contains a fix for this issue.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2018-14958

Produtos afetados

Weaselcms

Referências · 3

• 🔥 https://github.com/alterebro/WeaselCMS/issues/6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-14958 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-14958 · Aviso do Fabricante