Security Advisory

CVE-2020-36140

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-06-04 15:03:51

Last updated 2024-08-04 17:23:09

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

BloofoxCMS 0.5.2.1 allows Cross-Site Request Forgery (CSRF) via 'mode=settings&page=editor', as demonstrated by use of 'mode=settings&page=editor' to change any file content (Locally/Remotely).

← Browse all CVEs View on cve.org ↗