Cross site request forgery (csrf)

2023-11-1415:15:00

PRIOn knowledge base

www.prio-n.com

cross-site request forgery

dreamer cms

vulnerability

update url

nvd

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.1%

Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/update.

CPENameOperatorVersion
dreamer_cmseq4.1.3

CPE	Name	Operator	Version
	dreamer_cms	eq	4.1.3

References

github.com/moonsabc123/dreamer_cms/blob/main/There%20is%20a%20CSRF%20in%20the%20task%20management%20editing%20task%20area.md