Description
An issue was discovered in DiliCMS 2.4.0. There is a CSRF vulnerability that can delete a user or group via an admin/index.php/user/del/1 or admin/index.php/role/del/2 URI.
Unscored
CVE-2018-19291
EUVD-2018-10993GHSA-h7jm-ppvf-4m5h
An issue was discovered in DiliCMS 2.4.0. There is a CSRF vulnerability that can delete a user or group via an admin/index.php/user/del/1 o…
Published Nov 15, 2018 · Updated Aug 5, 2024 · Assigned by mitre