CVE-2020-36610

Summary

A vulnerability was found in annyshow DuxCMS 2.1. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-215116.

Affected Software

Weaknesses

• CWE-863: CWE-863 Incorrect Authorization -> CWE-862 Missing Authorization -> CWE-352 Cross-Site Request Forgery

ADP Enrichment

CVE Program Container

Additional References

• https://gitee.com/annyshow/DuxCMS2.1/issues/I183GG
• https://vuldb.com/?id.215116

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://gitee.com/annyshow/DuxCMS2.1/issues/I183GG
• https://vuldb.com/?id.215116

• ←Previous
• Next→