PT-2020-10334 · Typesetter · The Typesetter Cms

Published 2020-01-05 · Updated 2020-01-09 · CVE-2019-20077

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions The Typesetter CMS version 5.1

Description The issue affects the logout functionality of the admin panel in The Typesetter CMS, where the logout function is not protected by any CSRF tokens. This allows an attacker to potentially logout a user.

Recommendations For version 5.1, consider implementing CSRF tokens to protect the logout function of the admin panel as a fix for this issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2019-20077

Affected Products

The Typesetter Cms

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-20077 · Security Note
• https://osv.dev/vulnerability/CVE-2019-20077 · Vendor Advisory
• https://fatihhcelik.blogspot.com/2019/12/typesetter-cms-51-logout-csrf_30.html · Note