CVE-2017-9365

Publication date

2017-06-02 05:04:00

Family

mitre

State

PUBLISHED

Description

CSRF exists in BigTree CMS through 4.2.18 with the force parameter to /admin/pages/revisions.php - for example: /admin/pages/revisions/1/?force=false. A page with id=1 can be unlocked.