CVE-2020-18409

Cross Site Request Forgery (CSRF) vulnerability was discovered in CatfishCMS 4.8.63 that would allow attackers to obtain administrator permissions via /index.php/admin/index/modifymanage.html.

CVSS v3.1

6.8 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

EPSS

0.32% chance of exploitation in the next 30 days, 25th percentile

Published

2023-06-27

Updated

2024-12-05

Proof-of-concept exploits (1)

• xwlrbh/Catfish/issues/5

References

• CVE Record
• NVD entry

Related

• CVE-2018-10023
• CVE-2020-18404
• CVE-2020-18410
• CVE-2020-18395
• CVE-2020-18413
• CVE-2020-18382