Cross site request forgery (csrf)

2021-09-1522:15:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.6%

emlog v6.0 contains a Cross-Site Request Forgery (CSRF) via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles.

CPENameOperatorVersion
emlogeq6.0.0

CPE	Name	Operator	Version
	emlog	eq	6.0.0

References

github.com/emlog/emlog/issues/50