Description
A vulnerability was found in Spina CMS up to 2.18.0. It has been classified as problematic. Affected is an unknown function of the file /admin/pages/. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-272346 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Spina | CMS | 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 2.10, 2.11, 2.12, 2.13, 2.14, 2.15, 2.16, 2.17, 2.18 | — |
References
- VDB-272346 | Spina CMS cross-site request forgery vdb-entry
- VDB-272346 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #375236 | SpinaCMS Spina CMS v2.18.0 Cross-Site Request Forgery third-party-advisory
- https://github.com/topsky979/Security-Collections/blob/main/1700810/README.md exploit