CSRF Vulnerability in ThinkCMF 5.1.0 by ThinkCMF
CVE-2020-18151

6.5MEDIUM

Key Information:

Vendor

Thinkcmf

Status
Thinkcmf
Vendor
CVE Published:
14 July 2021

What is CVE-2020-18151?

A Cross Site Request Forgery (CSRF) vulnerability exists in ThinkCMF version 5.1.0, potentially allowing attackers to create unauthorized admin accounts. This security flaw can be exploited if a user is tricked into executing a request while authenticated, leading to unauthorized access and control over the application. Users of this software are urged to apply patches and ensure proper security measures are in place to mitigate potential attacks.

References

https://github.com/thinkcmf/thinkcmf/issues/580
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.