Description
Cross Site Request Forgery (CSRF) vulnerability in ThinkCMF v5.1.0, which can add an admin account.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | thinkcmf/thinkcmf | < 6.0.8 | 6.0.8 | GHSA-842m-vp3r-qwwr |
Medium · 6.5
CVE-2020-18151
EUVD-2022-3097GHSA-842m-vp3r-qwwr
ThinkCMF Cross Site Request Forgerly (CSRF) vulnerability
Published Jul 14, 2021 · Updated Aug 4, 2024 · Assigned by mitre