CVE-2020-19951: CSRF
Published Sep 23, 2021
·Updated
A cross-site request forgery (CSRF) in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application.
Affected Software
1 affected component
YzmCMS YzmCMS=5.5
Event History
Sep 23, 2021
CVE Published
via MITRE·07:46 PM
Data Sourced
via MITRE·07:46 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-19951?
CVE-2020-19951 has been assigned a medium severity level due to its potential to allow unauthorized access to sensitive components.
2
How do I fix CVE-2020-19951?
To fix CVE-2020-19951, ensure that CSRF protection mechanisms are properly implemented in the application.
3
What software is affected by CVE-2020-19951?
CVE-2020-19951 affects YzmCMS version 5.5.
4
What kind of attack does CVE-2020-19951 enable?
CVE-2020-19951 enables cross-site request forgery (CSRF) attacks that can lead to unauthorized access.
5
Where in YzmCMS does CVE-2020-19951 occur?
CVE-2020-19951 occurs in the /controller/pay.class.php file of YzmCMS.