CVE-2020-24130

2021-08-2020:15:06

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.4%

JSON

A cross site request forgery (CSRF) vulnerability in the configure.html component of Ponzu 0.11.0 allows attackers to change user and administrator credentials, and add or delete administrator accounts.

CPENameOperatorVersion
ponzueq0.8.2
ponzueq0.9.2
ponzueq0.10.1
ponzueq0.8.1
ponzueq0.8.0
ponzueq0.8.5
ponzueq0.9.0
ponzueq0.9.4
ponzueq0.11.0
ponzueq0.9.3