Cross site request forgery (csrf)

2023-07-3114:15:00

PRIOn knowledge base

www.prio-n.com

cross site request forgery

duxcms 2.1

admin.php

remote attackers

modify application data

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.1%

JSON

Cross Site Request Forgery (CSRF) vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add.

CPENameOperatorVersion
duxcmseq2.1

CPE	Name	Operator	Version
	duxcms	eq	2.1

References

gitee.com/annyshow/DuxCMS2.1/issues/I183GG