high8.8
CVE-2022-40489
ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrati…
Impact
ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thinkcmf | Thinkcmf | Version 6.0.7 |