Cross site request forgery (csrf)

2019-07-1820:15:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.5%

A CSRF vulnerability was found in flatCore before 1.5, leading to the upload of arbitrary .php files via acp/core/files.upload-script.php.

CPENameOperatorVersion
flatcorelt1.5

CPE	Name	Operator	Version
	flatcore	lt	1.5

References

github.com/flatCore/flatCore-CMS/compare/35fee64...de90af3

github.com/flatCore/flatCore-CMS/issues/39