~ / search / GHSA-842m-vp3r-qwwr

GHSA-842m-vp3r-qwwr

ThinkCMF Cross Site Request Forgerly (CSRF) vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-18151

Packages

EcosystemPackageAffectedFixed in
Packagist thinkcmf/thinkcmf < 6.0.8 6.0.8

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Request Forgery (CSRF) vulnerability in ThinkCMF, which can add an admin account.

References

External links from the advisory. They lead to third-party sites.