CVE-2020-10484: CSRF

Published Mar 12, 2020

Updated

CSRF in admin/add-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to create a custom field via a crafted request.

Affected Software

1 affected component

Chadhaajay Phpkb=9.0

Event History

Mar 12, 2020

CVE Published

via MITRE·01:05 PM

Data Sourced

via MITRE·01:05 PM

Description

Frequently Asked Questions

What is CVE-2020-10484?

CVE-2020-10484 is a vulnerability in Chadha PHPKB Standard Multi-Language 9 that allows attackers to create a custom field via a crafted request.

How severe is CVE-2020-10484?

CVE-2020-10484 has a severity rating of 4.3 (medium).

How can an attacker exploit CVE-2020-10484?

An attacker can exploit CVE-2020-10484 by sending a crafted request to admin/add-field.php in Chadha PHPKB Standard Multi-Language 9 to create a custom field.

Is there a fix available for CVE-2020-10484?

Yes, a fix is available for CVE-2020-10484. It is recommended to update to the latest version of Chadha PHPKB Standard Multi-Language (9.1 or higher) to mitigate the vulnerability.

Where can I find more information about CVE-2020-10484?

You can find more information about CVE-2020-10484 at these references: [1] http://antoniocannito.it/?p=343#csrf7, [2] https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-creating-a-new-custom-field-cve-2020-10484