CVE-2022-40489: CSRF
Published Dec 1, 2022
·Updated
ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.
Affected Software
2 affected componentsFixes available
composer/thinkcmf/thinkcmf<6.0.8
6.0.8
ThinkCMF ThinkCMF=6.0.7
Event History
Dec 1, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Advisory Published
via GitHub·06:30 AM
Frequently Asked Questions
1
What is CVE-2022-40489?
CVE-2022-40489 is a Cross Site Request Forgery (CSRF) vulnerability affecting ThinkCMF version 6.0.7.
2
How does CVE-2022-40489 impact ThinkCMF version 6.0.7?
CVE-2022-40489 allows a Super Administrator user to be injected into administrative users in ThinkCMF version 6.0.7.
3
What is the severity of CVE-2022-40489?
CVE-2022-40489 has a severity rating of 8.8 (high).
4
How can I fix CVE-2022-40489 in ThinkCMF version 6.0.7?
To fix CVE-2022-40489, it is recommended to upgrade to a patched version of ThinkCMF or apply the necessary security patches provided by the vendor.
5
Where can I find more information about CVE-2022-40489?
More information about CVE-2022-40489 can be found at the following reference: [link](https://github.com/thinkcmf/thinkcmf/issues/736)