Beveiligingsadvies

CVE-2026-104452

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-10-02 11:38:23

Laatst bijgewerkt 2026-10-02 14:02:31

Toegewezen door VulnCheck

CVSS-score 5.4

Status PUBLISHED

Beschrijving

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the filemanager page handler, which deletes page attachments on GET requests without validating a CSRF token. Attackers can lure a logged-in page owner or administrator into a top-level GET navigation with do=del, erase, or emptytrash, deleting or permanently purging the page's attachments.

← Alle CVE's bekijken Bekijk op cve.org ↗