CVE-2019-1010094

2019-07-1813:15:11

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.9%

JSON

domainmod v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change admin password. The component is: http://127.0.0.1/settings/password/ http://127.0.0.1/admin/users/add.php http://127.0.0.1/admin/users/edit.php?uid=2. The attack vector is: After the administrator logged in, open the html page.

CPENameOperatorVersion
domainmodeq0.51.0
domainmodeq0.26.2
domainmodeq0.70.2
domainmodeq4.03.000
domainmodeq0.67.1
domainmodeq0.91.1
domainmodeq0.26.4
domainmodeq0.30.1
domainmodeq0.18.0
domainmodeq0.61.1

Name	Operator	Version
domainmod	eq	0.51.0
domainmod	eq	0.26.2
domainmod	eq	0.70.2
domainmod	eq	4.03.000
domainmod	eq	0.67.1
domainmod	eq	0.91.1
domainmod	eq	0.26.4
domainmod	eq	0.30.1
domainmod	eq	0.18.0
domainmod	eq	0.61.1