Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component savepage.php. This vulnerability allows attackers to execute arbitrary code.
References
Link | Resource |
---|---|
https://github.com/u5cms/u5cms/issues/51 | Exploit Issue Tracking Third Party Advisory |
Configurations
History
09 Aug 2022, 19:46
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:yuba:u5cms:8.3.5:*:*:*:*:*:*:* | |
First Time |
Yuba u5cms
Yuba |
|
References | (MISC) https://github.com/u5cms/u5cms/issues/51 - Exploit, Issue Tracking, Third Party Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
CWE | CWE-352 |
03 Aug 2022, 01:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-08-03 01:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-34937
Mitre link : CVE-2022-34937
CVE.ORG link : CVE-2022-34937
JSON object : View
Products Affected
yuba
- u5cms
CWE
CWE-352
Cross-Site Request Forgery (CSRF)