Description
A vulnerability classified as problematic was found in XiaoBingby TeaCMS 2.0.2. Affected by this vulnerability is an unknown functionality of the file src/main/java/me/teacms/controller/admin/UserManageController/addUser. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| XiaoBingby | TeaCMS | 2.0.2 | — |
References
- VDB-309853 | XiaoBingby TeaCMS addUser cross-site request forgery vdb-entry
- VDB-309853 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #580729 | XiaoBingby TeaCMS 2.0.2 CSRF third-party-advisory
- https://gitee.com/xiaobingby/TeaCMS/issues/IBYRPK exploit issue-tracking