CSRF in Cmsmadesimple Cms Made Simple

CVE-2010-3883

Cross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make permission modifications.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.005 (41.4th percentile) — read the EPSS interpretation.

Affected products

Cmsmadesimple Cms_made_simple — versions 0.10, 1.6.2, 1.1.1
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)