CVE-2020-18157: CSRF
Published Jul 29, 2021
·Updated
Cross Site Request Forgery (CSRF) vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php.
Affected Software
1 affected component
Metinfo Metinfo=6.1.3
Event History
Jul 29, 2021
CVE Published
via MITRE·04:17 PM
Data Sourced
via MITRE·04:17 PM
Description
Frequently Asked Questions
1
What is CVE-2020-18157?
CVE-2020-18157 is a Cross Site Request Forgery (CSRF) vulnerability in MetInfo 6.1.3.
2
How does CVE-2020-18157 work?
CVE-2020-18157 allows an attacker to forge requests on behalf of the victim, potentially leading to unauthorized actions.
3
What is the severity of CVE-2020-18157?
CVE-2020-18157 has a severity rating of 8.8 (high).
4
How can I fix CVE-2020-18157?
To fix CVE-2020-18157, upgrade MetInfo to version 6.1.4 or apply the necessary patches provided by the vendor.
5
Where can I find more information about CVE-2020-18157?
More information about CVE-2020-18157 can be found at the following reference: [GitHub - Proof of Concept](https://github.com/je6k/ctf-challenges/blob/master/poc.txt)