CVE-2020-18326

Summary

Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary administrator user.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://subrion.com
• http://intelliants.com
• https://github.com/hamm0nz/CVE-2020-18326

References

• https://github.com/hamm0nz/CVE-2020-18326

• ←Previous
• Next→