CVE-2020-23686 - Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts

HIGH

Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts

Published Nov 2, 2021

8.8

HIGH

CVSS 3.1

EPSS 0.59%

Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts.

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-16428		Advisory
https://github.com/loadream/AyaCMS/issues/1		x_refsource_MISCExploitIssue TrackingThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Nov 2, 2021

Updated Aug 4, 2024

Reserved Aug 13, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Nov 2, 2021

Updated Aug 4, 2024

Exploited since n/a