CVE-2016-4891

2017-04-1222:00:00

jpcert

www.cve.org

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.9%

JSON

Cross-site request forgery (CSRF) vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authentication of an administrator to change settings via unspecified vectors.

References

jvn.jp/en/jp/JVN80157683/index.html

jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000196.html

www.securityfocus.com/bid/93475