Description (CNA)
A vulnerability classified as problematic has been found in dazhouda lecms 3.0.3. This affects an unknown part of the file /index.php?my-password-ajax-1 of the component Password Change Handler. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| dazhouda / lecms | affected 3.0.3 |
CWE
CWE-352, CWE-862
References
- https://vuldb.com/?id.306315
- https://vuldb.com/?ctiid.306315
- https://vuldb.com/?submit.557787
- https://github.com/dtwin88/cve-md/blob/main/lecms%20V3.0.3/lecms_3.md
ADP enrichment
No English description supplied.