PT-2023-17353 · Unknown · Zhenfeng13 My-Blog

I6Pv4Uzhenfeng13 · CVE-2023-1937 · Published 2023-04-07 · Updated 2024-05-17

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions zhenfeng13 My-Blog (affected versions not specified)

Description A problematic issue was found in the software, affecting an unknown function of the file /admin/configurations/userInfo. The manipulation of the arguments yourAvatar, yourName, and yourEmail leads to cross-site request forgery. It is possible to launch the attack remotely. The issue has been disclosed to the public and may be used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2023-1937

Affected Products

Zhenfeng13 My-Blog

References · 5

• 🔥 https://gitee.com/zhenfeng13/My-Blog/issues/I6PV4U · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-1937 · Security Note
• https://vuldb.com/?ctiid.225264 · Note
• https://vuldb.com/?id.225264 · Note
• https://t.me/cibsecurity/61646 · Telegram Post