CVE-2019-15229

2019-08-2000:15:10

Google

osv.dev

7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.9%

JSON

FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page.

CPENameOperatorVersion
fuel-cmseq1.3
fuel-cmseq1.0.4
fuel-cmseq1.0.1
fuel-cmseq1.4.2
fuel-cmseq1.0.5
fuel-cmseq1.0
fuel-cmseq1.4.3
fuel-cmseq1.0.6
fuel-cmseq1.3.1
fuel-cmseq1.4.1