Security Advisory

CVE-2020-19264

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-09-09 17:44:40
Last updated 2024-08-04 14:08:30
Assigner mitre
State PUBLISHED

Description

A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd.