CVE-2022-40489

2022-12-0100:00:00

mitre

www.cve.org

thinkcmf cross_site_request_forgery super_administrator_administrative_users injection vulnerabilitycve-2022-40489

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.5%

JSON

ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.

References

github.com/thinkcmf/thinkcmf/issues/736