PT-2015-3514 · Diafan · Diafan Cms
Published
2015-01-01
·
Updated
2015-01-02
·
CVE-2011-5318
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
diafan.CMS versions prior to 5.1
Description
The issue allows remote attackers to hijack the authentication of administrators for requests. This can be achieved through multiple cross-site request forgery (CSRF) vulnerabilities. Specifically, the vulnerabilities can be exploited to modify articles via a
save post action to "admin/news/saveNEWS ID/", modify settings via a save post action to "admin/site/save2/", or modify credentials via a save post action to "admin/usersite/save2/".Recommendations
For diafan.CMS versions prior to 5.1, update to version 5.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the "admin/news/saveNEWS ID/", "admin/site/save2/", and "admin/usersite/save2/" API endpoints to minimize the risk of exploitation. Additionally, avoid using the
save post action in these endpoints until the issue is resolved.Exploit
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Diafan Cms