Lucene search

K
cveMitreCVE-2020-19803
HistoryApr 11, 2023 - 6:15 p.m.

CVE-2020-19803

2023-04-1118:15:58
CWE-352
mitre
web.nvd.nist.gov
16
cve-2020-19803
csrf
vulnerability
milken doyocms
remote attacker
arbitrary code
nvd

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.003

Percentile

68.7%

Cross Site Request Forgery vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the background system settings.

Affected configurations

Nvd
Node
doyocms_projectdoyocmsMatch2.3-
VendorProductVersionCPE
doyocms_projectdoyocms2.3cpe:2.3:a:doyocms_project:doyocms:2.3:-:*:*:*:*:*:*

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.003

Percentile

68.7%

Related for CVE-2020-19803