CVE-2019-8902: CSRF
Published Feb 18, 2019
·Updated
An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI.
Affected Software
1 affected component
idreamsoft iCMS<=7.0.14
Event History
Feb 18, 2019
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2019-8902?
CVE-2019-8902 is a CSRF vulnerability in idreamsoft iCMS through 7.0.14 that allows attackers to delete users' articles via the public/api.php?app=user URI.
2
How severe is CVE-2019-8902?
CVE-2019-8902 has a severity rating of 5.7, which is considered medium.
3
How does CVE-2019-8902 affect idreamsoft iCMS?
CVE-2019-8902 affects idreamsoft iCMS versions up to and including 7.0.14.
4
Is there a fix for CVE-2019-8902?
Yes, updating idreamsoft iCMS to a version beyond 7.0.14 will fix the CSRF vulnerability.
5
Where can I find more information about CVE-2019-8902?
More information about CVE-2019-8902 can be found at the following reference link: https://github.com/idreamsoft/iCMS/issues/56