CVE-2020-21321 | Severity.io

Description

emlog v6.0 contains a Cross-Site Request Forgery (CSRF) via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles.

Related CPE's

Vulnerable

References

ExploitIssue TrackingThird Party Advisory

ExploitIssue TrackingThird Party Advisory

Weaknesses

Primary

CWE-352

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

4.3 · Medium

Information

Source identifier

Vulnerability status

Modified

Published

2021-09-15T20:15:07.663Z

4 years ago

Last modified

2024-11-21T04:12:30.940Z

1 year ago