Cross-Site Request Forgery in CSZ CMS by CSKaza
CVE-2019-7566

8.8HIGH

Key Information:

Vendor

Cszcms

Status
Csz Cms
Vendor
CVE Published:
7 February 2019

What is CVE-2019-7566?

CSZ CMS version 1.1.8 is susceptible to Cross-Site Request Forgery (CSRF) attacks through an insecure endpoint that allows unauthorized users to create new user accounts via the admin panel. This vulnerability can enable attackers to execute unwanted actions on behalf of authenticated users without their consent, potentially compromising sensitive information and leading to further security breaches.

References

https://github.com/cskaza/cszcms/issues/17
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2019-7566 : Cross-Site Request Forgery in CSZ CMS by CSKaza