PT-2020-18586 · Unknown · Calendar01+1

Yuji Tounai · Published 2020-08-04 · Updated 2020-08-06 · CVE-2020-5615

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Calendar01 version 1.0.0 Calendar02 version 1.0.0

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators.

Recommendations For Calendar01 version 1.0.0, update to a version that includes a fix for this issue. For Calendar02 version 1.0.0, update to a version that includes a fix for this issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2020-5615

Affected Products

Calendar01

Calendar02

References · 5

• https://osv.dev/vulnerability/CVE-2020-5615 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5615 · Security Note
• https://php-factory.net/calendar/01.php · Note
• https://php-factory.net/calendar/02.php · Note
• https://jvn.jp/en/jp/JVN73169744/index.html · Note