What is GHSA-842m-vp3r-qwwr?

GHSA-842m-vp3r-qwwr is a security advisory published by GitHub Security Advisories with Medium severity. ThinkCMF Cross Site Request Forgerly (CSRF) vulnerability

Which CVE IDs does GHSA-842m-vp3r-qwwr cover?

GHSA-842m-vp3r-qwwr covers the following CVE IDs: CVE-2020-18151. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-842m-vp3r-qwwr?

GHSA-842m-vp3r-qwwr has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-842m-vp3r-qwwr?

GHSA-842m-vp3r-qwwr affects 1 product, including: composer/thinkcmf/thinkcmf:\u003c 6.0.8.

GHSA-842m-vp3r-qwwrMediumCVSS 6.5

ThinkCMF Cross Site Request Forgerly (CSRF) vulnerability

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

April 25, 2024

🔗 CVE IDs covered (1)

CVE-2020-18151 →

📋 Description

Cross Site Request Forgery (CSRF) vulnerability in ThinkCMF, which can add an admin account.

🎯 Affected products1

composer/thinkcmf/thinkcmf:< 6.0.8

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2020-18151
https://github.com/thinkcmf/thinkcmf/issues/580
https://github.com/thinkcmf/thinkcmf/issues/736
https://github.com/thinkcmf/thinkcmf/commit/321faa20865e74540e5f0a63e4c3f4ea75093d59
https://github.com/thinkcmf/thinkcmf/commit/b61636134aa57d4693967f35772200c779099740
https://github.com/advisories/GHSA-842m-vp3r-qwwr