Cross site request forgery (csrf)

2022-12-0105:15:00

PRIOn knowledge base

www.prio-n.com

thinkcmf 6.0.7

cross site request forgery

super administrator

administrative users

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.5%

JSON

ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.

CPENameOperatorVersion
thinkcmfeq6.0.7

CPE	Name	Operator	Version
	thinkcmf	eq	6.0.7

References

github.com/thinkcmf/thinkcmf/issues/736