ByteOS Network

NVD Vulnerability Details :

CVE-2019-12253

Analyzed

Source-cve@mitre.org

Published At-21 May, 2019 | 17:29

Updated At-21 May, 2019 | 18:38

my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Type	Version	Base score	Base severity	Vector
Primary	3.0	6.5	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Primary	2.0	5.8	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:P

mylittleforum>>my_little_forum>>Versions before 2.4.20(exclusive)

CWE ID	Type	Source
CWE-352	Primary	nvd@nist.gov

Hyperlink	Source	Resource
https://github.com/ilosuna/mylittleforum/issues/468	cve@mitre.org	Exploit Third Party Advisory
https://github.com/ilosuna/mylittleforum/releases/tag/2.4.20	cve@mitre.org	Third Party Advisory