medium4.3
CVE-2016-20054
Nodcms contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious forms.
Impact
Nodcms contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious forms. Attackers can trick authenticated administrators into submitting requests to admin/user_manipulate and admin/settings/generall endpoints to create users or modify application settings without explicit consent.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | khodakhah/nodcms | <= 3.4.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nodcms | Nodcms | Version 1.0 |