Unscored CVE-2016-4891 EUVD-2016-5867GHSA-cmxc-32w9-hhp4

Cross-site request forgery (CSRF) vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authentication of an admin…

Published Apr 12, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site request forgery (CSRF) vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authentication of an administrator to change settings via unspecified vectors.

References

JVNDB-2016-000196 third-party-advisory
93475 vdb-entry
JVN#80157683 third-party-advisory