Cross site request forgery (csrf)

2019-09-2120:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.4%

admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route.

CPENameOperatorVersion
yzmcmseq5.3

CPE	Name	Operator	Version
	yzmcms	eq	5.3

References

github.com/yzmcms/yzmcms/issues/27