CVE-2020-18131

2023-05-0800:00:00

mitre

www.cve.org

cross site request forgery

bluethrust clan scripts v4

privilege escalation

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.3%

JSON

Cross Site Request Forgery (CSRF) vulnerability in Bluethrust Clan Scripts v4 allows attackers to escilate privledges to an arbitrary account via a crafted request to /members/console.php?cID=5.

References

github.com/bluethrust/clanscripts

github.com/bluethrust/clanscripts/issues/27