Skip to content

CVE-2017-5959 CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a token.

CriticalCVSS 9.8 EPSS 0.61%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a token.

Affected products

ProductAffected versionsFixed in
metalgenix genixcms <= 1.0.1 No fix listed

References

  • github.com issue-tracking patch third-party-advisory
  • github.com issue-tracking patch third-party-advisory