CVE-2022-4014 - FeehiCMS Post My Comment Tab cross-site request forgery

Back Back to CVE browser

MEDIUM

FeehiCMS Post My Comment Tab cross-site request forgery

Published Nov 16, 2022

4.3

MEDIUM

CVSS 3.1

EPSS 0.21%

Description

A vulnerability, which was classified as problematic, has been found in FeehiCMS. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The identifier of this vulnerability is VDB-213788.

Affected products

Vendor n/a Product FeehiCMS Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

FeehiCMS

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-352

CSRF

CWE-863

Incorrect Authorization

References (3)

https://github.com/advisories/GHSA-cjp8-vv38-p3g2
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-4014
https://vuldb.com/?id.213788
Permissions RequiredThird Party Advisory

Link	Providers	Tags
https://github.com/advisories/GHSA-cjp8-vv38-p3g2		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-4014
https://vuldb.com/?id.213788		Permissions RequiredThird Party Advisory