CVE-2020-23960

Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Fork before 5.8.3 allows remote attackers to perform unauthorized actions as…

published January 11, 2021

CVSS
—
EPSS
1%
Percentile
52.0
In the wild
Unconfirmed
What it is

Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Fork before 5.8.3 allows remote attackers to perform unauthorized actions as administrator to (1) approve the mass of the user's comments, (2) restoring a deleted user, (3) installing or running modules, (4) resetting the analytics, (5) pinging the mailmotor api, (6) uploading things to the media library, (7) exporting locale.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00684 · 52.0th percentile
Published
2021-01-11T15:54Z
EPSS history
Timeline
  • 11 JAN 15:54Z
    Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Fork before 5.8.3 allows remote attackers to perform unauthorized actions as…
    cvelistv5