CVE-2020-24739: CSRF
Published Sep 10, 2020
·Updated
A CSRF vulnerability was found in iCMS v7.0.0 in the background deletion administrator account. When missing the CSRFTOKEN and can still request normally, all administrators except the initial administrator will be deleted.
Affected Software
1 affected component
idreamsoft iCMS=7.0.0
Event History
Sep 10, 2020
CVE Published
via MITRE·01:17 PM
Data Sourced
via MITRE·01:17 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this CSRF vulnerability in iCMS v7.0.0?
The vulnerability ID is CVE-2020-24739.
2
What is the severity of CVE-2020-24739?
CVE-2020-24739 has a severity rating of 6.5 (medium).
3
In which version of iCMS was the CSRF vulnerability found?
The CSRF vulnerability was found in iCMS v7.0.0.
4
How does the CSRF vulnerability in iCMS v7.0.0 impact administrators?
If the CSRF_TOKEN is missing, an attacker can still delete all administrators except the initial one.
5
Is there a fix available for the CSRF vulnerability in iCMS v7.0.0?
Currently, there is no information available regarding a fix for the CSRF vulnerability in iCMS v7.0.0.