CVE-2020-23595

Summary

CVE-2020-23595 is a Cross-Site Request Forgery (CSRF) vulnerability affecting version 5.6 of yzmcms. This issue enables remote attackers to exploit the sitemodel/add.html endpoint and escalate privileges, potentially gaining access to sensitive information. An attacker can trick a user into making a malicious request while they are still logged in to the vulnerable system, leading to unintended actions and potential data theft. Users of yzmcms version 5.6 are advised to upgrade to a patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.