PT-2020-16082 · Blackcat · Blackcat Cms

Zxc7528064 · Published 2020-09-15 · Updated 2022-01-01 · CVE-2020-25453

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BlackCat CMS versions prior to 1.4

Description An issue in BlackCat CMS allows for a CSRF vulnerability, which can be exploited to bypass the csrf token and enable remote arbitrary code execution.

Recommendations For versions prior to 1.4, update to version 1.4 or later to resolve the issue. As a temporary workaround, consider implementing additional CSRF protection measures to minimize the risk of exploitation.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2020-25453

Affected Products

Blackcat Cms

References · 6

• 🔥 https://github.com/BlackCatDevelopment/BlackCatCMS/issues/389 · Exploit
• 🔥 http://packetstormsecurity.com/files/159237/BlackCat-CMS-1.3.6-Cross-Site-Request-Forgery.html · Exploit
• 🔥 https://exploit-db.com/exploits/48820 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-25453 · Security Note
• https://osv.dev/vulnerability/CVE-2020-25453 · Vendor Advisory
• https://t.me/cvenotify/14174 · Telegram Post