CVE-2020-20693 - A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts

HIGH

A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts

Published Sep 27, 2021

8.8

HIGH

CVSS 3.1

EPSS 0.70%

A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts.

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-2080		Advisory
https://github.com/GilaCMS/gila/issues/51		x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://github.com/advisories/GHSA-hwqc-pgjw-vjqp		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-20693