PT-2024-5128 · Arfa-Cms · Arfa-Cms

Published 2024-06-19 · Updated 2024-06-19

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Arfa-CMS (affected versions not specified)

Description: The issue is related to a cross-site request forgery (CSRF) vulnerability. This could allow a remote attacker to perform a CSRF attack.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

BDU:2024-05675

Affected Products

Arfa-Cms

References · 2

• https://bdu.fstec.ru/vul/2024-05675 · Security Note
• https://arfa-cms.ru/blog/post/obnovlenie-bazovoy-sborki-do-versii-5-1-3132.html · Note