CVE-2019-18220 - Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery (CSRF) issue as it doesn't implement any method to validate incoming requests, allowing the execution of critical functionalities via spoofed requests

Back Back to CVE browser

HIGH

Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery (CSRF) issue as it doesn't implement any method to validate incoming requests, allowing the execution of critical functionalities via spoofed requests

Published Oct 23, 2019

8.8

HIGH

CVSS 3.1

EPSS 1.11%

Description

Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery (CSRF) issue as it doesn't implement any method to validate incoming requests, allowing the execution of critical functionalities via spoofed requests. This behavior could be abused by a remote unauthenticated attacker to trick Sitemagic users into performing unwarranted actions.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8020
Advisory
https://github.com/Jemt/SitemagicCMS/blob/master/changelog.txt
x_refsource_MISCRelease NotesThird Party Advisory
https://vuldb.com/?id.144008
x_refsource_MISCPermissions RequiredThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8020		Advisory
https://github.com/Jemt/SitemagicCMS/blob/master/changelog.txt		x_refsource_MISCRelease NotesThird Party Advisory
https://vuldb.com/?id.144008		x_refsource_MISCPermissions RequiredThird Party Advisory