PT-2018-12834 · Weaselcms · Weaselcms

Cgaiideo · Published 2018-08-05 · Updated 2018-10-04 · CVE-2018-14958

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WeaselCMS version 0.3.5

Description An issue allows CSRF to update website settings, including theme, title, and description, via the "index.php" endpoint.

Recommendations For WeaselCMS version 0.3.5, update to a newer version that contains a fix for this issue.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2018-14958

Affected Products

Weaselcms

References · 3

• 🔥 https://github.com/alterebro/WeaselCMS/issues/6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-14958 · Security Note
• https://osv.dev/vulnerability/CVE-2018-14958 · Vendor Advisory