CVE-2017-9365

CSRF exists in BigTree CMS through 4.2.18 with the force parameter to /admin/pages/revisions.php - for example: /admin/pages/revisions/1/?force=false

published June 2, 2017

CVSS
—
EPSS
0%
Percentile
39.1
In the wild
Unconfirmed
What it is

CSRF exists in BigTree CMS through 4.2.18 with the force parameter to /admin/pages/revisions.php - for example: /admin/pages/revisions/1/?force=false. A page with id=1 can be unlocked.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00467 · 39.1th percentile
Published
2017-06-02T05:04Z
EPSS history
Timeline
  • 02 JUN 05:04Z
    CSRF exists in BigTree CMS through 4.2.18 with the force parameter to /admin/pages/revisions.php - for example: /admin/pages/revisions/1/?force=false
    cvelistv5