high8.1
CVE-2020-24130
A cross site request forgery (CSRF) vulnerability in the configure.html component of Ponzu 0.11.0 allows attackers to change user and administrator credentials…
Impact
A cross site request forgery (CSRF) vulnerability in the configure.html component of Ponzu 0.11.0 allows attackers to change user and administrator credentials, and add or delete administrator accounts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ponzu-Cms | Ponzu | Version 0.11.0 |