CVE-2019-16678

2019-09-2120:15:10

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.4%

admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route.

CPENameOperatorVersion
yzmcmseq5.3.0

CPE	Name	Operator	Version
	yzmcms	eq	5.3.0

References

github.com/yzmcms/yzmcms/issues/27