Lucene search
HistoryAug 03, 2022 - 1:15 a.m.
CVE-2022-34937
yuba
u5cms
v8.3.5
cve-2022-34937
csrf
cross-site request forgery
code execution
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
46.6%
Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component savepage.php. This vulnerability allows attackers to execute arbitrary code.
Affected configurations
Node
yubau5cmsMatch8.3.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| yuba:u5cms | yuba u5cms | eq | 8.3.5 |
References
Social References
More
Related
nvd
nvd
CVE-2022-34937
2022-08-03 01:15:07
cvelist
cvelist
CVE-2022-34937
2022-08-03 00:50:03
prion
prion
Cross site request forgery (csrf)
2022-08-03 01:15:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
46.6%
Related for CVE-2022-34937