Security Advisory

CVE-2022-23887

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-01-28 20:44:58

Last updated 2024-08-03 03:59:22

Assigner mitre

State PUBLISHED

Description

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily delete user accounts via /admin/admin_manage/delete.

← Browse all CVEs View on cve.org ↗