Cross site request forgery (csrf)

2019-04-3020:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.8%

JSON

doorGets 7.0 has a CSRF vulnerability in /doorgets/app/requests/user/configurationRequest.php. A remote attacker can exploit this vulnerability for “Google Analytics code” modification.

CPENameOperatorVersion
doorgets_cmseq7.0

CPE	Name	Operator	Version
	doorgets_cms	eq	7.0

References

github.com/itodaro/doorGets_cve