CVE-2019-16059

2019-09-0618:02:36

mitre

www.cve.org

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.9%

JSON

Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page.

References

www.sevenlayers.com/index.php/246-sentrifugo-3-2-csrf