What is GHSA-gqqf-8cx6-9r7h?

GHSA-gqqf-8cx6-9r7h is a security advisory published by GitHub Security Advisories with Medium severity. Umbraco CMS vulnerable to CSRF

Which CVE IDs does GHSA-gqqf-8cx6-9r7h cover?

GHSA-gqqf-8cx6-9r7h covers the following CVE IDs: CVE-2020-7210. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gqqf-8cx6-9r7h?

GHSA-gqqf-8cx6-9r7h has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-gqqf-8cx6-9r7h?

GHSA-gqqf-8cx6-9r7h affects 1 product, including: nuget/UmbracoCMS.Core:\u003c 8.5.0.

GHSA-gqqf-8cx6-9r7hMediumCVSS 4.3

Umbraco CMS vulnerable to CSRF

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 13, 2023

🔗 CVE IDs covered (1)

CVE-2020-7210 →

📋 Description

Umbraco CMS 8.2.2 allows CSRF to enable/disable or delete user accounts.

🎯 Affected products1

nuget/UmbracoCMS.Core:< 8.5.0

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2020-7210
https://sec-consult.com/en/blog/advisories/cross-site-request-forgery-csrf-in-umbraco-cms/
https://seclists.org/bugtraq/2020/Jan/35
http://packetstormsecurity.com/files/156062/Umbraco-CMS-8.2.2-Cross-Site-Request-Forgery.html
http://seclists.org/fulldisclosure/2020/Jan/33
https://github.com/advisories/GHSA-gqqf-8cx6-9r7h