CVE-2018-16365: CSRF
Published Sep 2, 2018
·Updated
An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=group&do=save allows CSRF.
Affected Software
1 affected component
idreamsoft iCMS=7.0.10
Event History
Sep 2, 2018
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-16365?
The severity of CVE-2018-16365 is high with a severity value of 8.8.
2
What is the affected software of CVE-2018-16365?
The affected software of CVE-2018-16365 is idreamsoft iCMS V7.0.10.
3
What is the vulnerability type of CVE-2018-16365?
CVE-2018-16365 is a Cross-Site Request Forgery (CSRF) vulnerability.
4
How can I fix the CVE-2018-16365 vulnerability?
To fix the CVE-2018-16365 vulnerability, update idreamsoft iCMS to a version that is not affected by the vulnerability.
5
Where can I find more information about CVE-2018-16365?
You can find more information about CVE-2018-16365 in the GitHub issue: https://github.com/idreamsoft/iCMS/issues/32.