CVE-2018-11679

HIGH

CmsEasy 6.1_20180508 - Cross-Site Request Forgery via Article Addition

Title source: llm

Description

An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability that can add an article via /index.php?case=table&act=add&table=archive&admin_dir=admin.

References (2)

Core 2

Core References

Third Party Advisory x_refsource_misc

http://www.8sec.cc/archives/619

Exploit, Third Party Advisory x_refsource_misc

http://www.8sec.cc/cmseasy_addarticle.txt

Scores

CVSS v3 8.8

EPSS 0.0054

EPSS Percentile 41.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-352

Status published

Products (1)

cmseasy/cmseasy 6.0 20180508

Published Jun 02, 2018

Tracked Since Feb 18, 2026