CVE-2018-18420 - Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenario__content%2Fpanels%2Fcontent URI

Back Back to CVE browser

HIGH

Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenario__content%2Fpanels%2Fcontent URI

Published Oct 19, 2018

8.8

HIGH

CVSS 3.0

EPSS 0.82%

Description

Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenario__content%2Fpanels%2Fcontent URI.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (3)

http://packetstormsecurity.com/files/149851/Zenar-Content-Management-System-8.3-Cross-Site-Request-Forgery.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://github.com/advisories/GHSA-22cq-xxr9-jrrv
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-18420

Link	Providers	Tags
http://packetstormsecurity.com/files/149851/Zenar-Content-Management-System-8.3-Cross-Site-Request-Forgery.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://github.com/advisories/GHSA-22cq-xxr9-jrrv		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-18420