CVE-2022-43031
DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add Administrator accounts and modify Admin passwords.
Published: 2022-11-09 · CVSS: 8.8 · CVSS 3.1
DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add Administrator accounts and modify Admin passwords.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7