~ / search / GHSA-4cw3-rhqx-vqwr

GHSA-4cw3-rhqx-vqwr

GilaCMS Cross Site Request Forgery vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2020-20726

Packages

EcosystemPackageAffectedFixed in
Packagist gilacms/gila <= 1.11.4 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the `cm/update_rows/user` parameter.

References

External links from the advisory. They lead to third-party sites.