CVE-2020-10057
04.03.2020, 19:15
GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an incomplete fix for CVE-2015-2680, in which "token" is used as a CSRF protection mechanism, but without validation that "token" is associated with an administrative user.
| Vendor | Product | Version |
|---|---|---|
| metalgenix | genixcms | 1.1.7 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration