Cross site request forgery (csrf)

2023-05-0814:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

csrf

bluethrust clan scripts

privilege escalation

crafted request

nvd

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.3%

JSON

Cross Site Request Forgery (CSRF) vulnerability in Bluethrust Clan Scripts v4 allows attackers to escilate privledges to an arbitrary account via a crafted request to /members/console.php?cID=5.

CPENameOperatorVersion
clanscriptseq4.0

CPE	Name	Operator	Version
	clanscripts	eq	4.0

References

github.com/bluethrust/clanscripts

github.com/bluethrust/clanscripts/issues/27