CVE Daily

CVE-2020-35273

EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected ...

High CVSS 8.0

Overview

EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Profile panel. An attacker can update any user's account.

CWE: CWE-352 Published: 2020-12-21T15:15:13.047
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 8.0 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags