CoreCVE
Back

HIGH

ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users

Published Dec 1, 2022

Description

ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (5)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Dec 1, 2022
Updated Apr 24, 2025
Reserved Sep 11, 2022
Link CVE-2022-40489
CISA Vulnrichment
Updated Apr 24, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-40489
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-40489
ENISA EUVD
Assigner n/a
Published n/a
Updated n/a
Exploited since n/a
Link n/a
GHSA-6XW3-CPQJ-8MXR