CVE-2020-18151: CSRF
Published Jul 14, 2021
·Updated
Cross Site Request Forgery (CSRF) vulnerability in ThinkCMF v5.1.0, which can add an admin account.
Other sources
Cross Site Request Forgery (CSRF) vulnerability in ThinkCMF, which can add an admin account.
— GitHub
Affected Software
2 affected componentsFixes available
composer/thinkcmf/thinkcmf<6.0.8
6.0.8
ThinkCMF ThinkCMF=5.1.0
Event History
Jul 14, 2021
CVE Published
via MITRE·06:18 PM
Data Sourced
via MITRE·06:18 PM
Description
May 24, 2022
Advisory Published
via GitHub·07:07 PM
Frequently Asked Questions
1
What is the severity of CVE-2020-18151?
CVE-2020-18151 is considered a critical vulnerability due to its ability to allow unauthorized creation of admin accounts.
2
How do I fix CVE-2020-18151?
To fix CVE-2020-18151, upgrade to ThinkCMF version 6.0.8 or later.
3
What type of vulnerability is CVE-2020-18151?
CVE-2020-18151 is a Cross Site Request Forgery (CSRF) vulnerability.
4
Which versions of ThinkCMF are affected by CVE-2020-18151?
ThinkCMF version 5.1.0 is specifically affected by CVE-2020-18151.
5
What can attackers do exploiting CVE-2020-18151?
Attackers can exploit CVE-2020-18151 to add an administrative account to the vulnerable application.