PT-2023-17353 · Unknown · Zhenfeng13 My-Blog

I6Pv4Uzhenfeng13 · Publicado 2023-04-07 · Atualizado 2024-05-17 · CVE-2023-1937

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions zhenfeng13 My-Blog (affected versions not specified)

Description A problematic issue was found in the software, affecting an unknown function of the file /admin/configurations/userInfo. The manipulation of the arguments yourAvatar, yourName, and yourEmail leads to cross-site request forgery. It is possible to launch the attack remotely. The issue has been disclosed to the public and may be used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2023-1937

Produtos afetados

Zhenfeng13 My-Blog

Referências · 5

• 🔥 https://gitee.com/zhenfeng13/My-Blog/issues/I6PV4U · Exploit
• https://vuldb.com/?ctiid.225264 · Nota
• https://vuldb.com/?id.225264 · Nota
• https://t.me/cibsecurity/61646 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-1937 · Nota de Segurança