CVE-2022-44389: CSRF

Published Nov 14, 2022

Updated

EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit Admin Profile module. This vulnerability allows attackers to arbitrarily change Administrator account information.

Affected Software

1 affected component

Eyoucms Eyoucms=1.5.9

Event History

Nov 14, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2022-44389?

CVE-2022-44389 is a Cross-Site Request Forgery (CSRF) vulnerability found in EyouCMS V1.5.9-UTF8-SP1.

What is the severity of CVE-2022-44389?

CVE-2022-44389 has a severity rating of 6.5 (medium).

How does CVE-2022-44389 affect EyouCMS?

CVE-2022-44389 allows attackers to change Administrator account information in EyouCMS V1.5.9-UTF8-SP1.

How can I fix CVE-2022-44389?

To fix CVE-2022-44389, it is recommended to update EyouCMS to a version that addresses the CSRF vulnerability.

Where can I find more information about CVE-2022-44389?

You can find more information about CVE-2022-44389 at the following reference: [https://github.com/weng-xianhu/eyoucms/issues/30](https://github.com/weng-xianhu/eyoucms/issues/30)