Description
CSRF exists in BigTree CMS through 4.2.18 with the force parameter to /admin/pages/revisions.php - for example: /admin/pages/revisions/1/?force=false. A page with id=1 can be unlocked.
Unscored
CVE-2017-9365
EUVD-2017-18300GHSA-j245-vch7-cw25
CSRF exists in BigTree CMS through 4.2.18 with the force parameter to /admin/pages/revisions.php - for example: /admin/pages/revisions/1/?f…
Published Jun 2, 2017 · Updated Aug 5, 2024 · Assigned by mitre