Description
ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | thinkcmf/thinkcmf | < 6.0.8 | 6.0.8 | GHSA-6xw3-cpqj-8mxr |