high8.8
CVE-2021-45017
Cross Site Request Forgery (CSRF) vulnerability exits in Catfish <=6.1.* when you upload an html file containing CSRF on the website that uses a google editor;…
Impact
Cross Site Request Forgery (CSRF) vulnerability exits in Catfish <=6.1.* when you upload an html file containing CSRF on the website that uses a google editor; you can specify the menu url address as your malicious url address in the Add Menu column.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Catfish-Cms | Catfish Cms | through 6.3.0 |