CVE-2020-10057

GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an incomplete fix for CVE-2015-26...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an incomplete fix for CVE-2015-2680, in which "token" is used as a CSRF protection mechanism, but without validation that "token" is associated with an administrative user.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

参照URL

report github.com