CSRF Vulnerability in FastAdmin by FastAdmin
CVE-2019-11077

8.8HIGH

Key Information:

Vendor

Fastadmin

Status
Fastadmin
Vendor
CVE Published:
11 April 2019

What is CVE-2019-11077?

FastAdmin version V1.0.0.20190111_beta is exposed to a Cross-Site Request Forgery (CSRF) vulnerability that allows an unauthorized attacker to add a new admin user through a specially crafted request to the admin authentication endpoint. This security flaw can potentially lead to unauthorized access and control over the administrative functionalities of the application.

References

http://www.iwantacve.cn/index.php/archives/191/
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.