CVE-2020-10485: CSRF

Published Mar 12, 2020

Updated

CSRF in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article via a crafted request.

Affected Software

1 affected component

Chadhaajay Phpkb=9.0

Event History

Mar 12, 2020

CVE Published

via MITRE·01:05 PM

Data Sourced

via MITRE·01:05 PM

Description

Frequently Asked Questions

What is CVE-2020-10485?

CVE-2020-10485 is a CSRF vulnerability in the Chadha PHPKB Standard Multi-Language 9 that allows attackers to delete an article via a crafted request.

How can attackers exploit CVE-2020-10485?

Attackers can exploit CVE-2020-10485 by sending a malicious crafted request to the admin/manage-articles.php endpoint.

What is the severity of CVE-2020-10485?

CVE-2020-10485 has a severity rating of medium with a CVSS severity value of 4.3.

How can I fix CVE-2020-10485?

To fix CVE-2020-10485, Chadha PHPKB Standard Multi-Language 9 users should update to the latest version of the software.

Are there any references for CVE-2020-10485?

Yes, the following references provide additional information on CVE-2020-10485: - http://antoniocannito.it/?p=343#csrf8 - https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-an-article-cve-2020-10485