CVE-2019-17593: CSRF
Published Oct 14, 2019
·Updated
JIZHICMS 1.5.1 allows admin.php/Admin/adminadd.html CSRF to add an administrator.
Affected Software
1 affected component
Jizhicms JIZHICMS=1.5.1
Event History
Oct 14, 2019
CVE Published
via MITRE·08:07 PM
Data Sourced
via MITRE·08:07 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-17593?
The severity of CVE-2019-17593 is high with a CVSS score of 8.8.
2
How does CVE-2019-17593 affect JIZHICMS 1.5.1?
CVE-2019-17593 allows CSRF attacks on admin.php/Admin/adminadd.html in JIZHICMS 1.5.1, enabling unauthorized addition of an administrator.
3
How can I fix CVE-2019-17593 vulnerability in JIZHICMS 1.5.1?
To fix the CVE-2019-17593 vulnerability in JIZHICMS 1.5.1, apply the latest security patch or upgrade to a patched version of JIZHICMS.
4
What is the Common Weakness Enumeration (CWE) of CVE-2019-17593?
The Common Weakness Enumeration (CWE) of CVE-2019-17593 is CWE-352: Cross-Site Request Forgery (CSRF).
5
Where can I find more information about CVE-2019-17593?
You can find more information about CVE-2019-17593 at the following reference: https://github.com/Cherry-toto/jizhicms/issues/1