CSRF Vulnerability in Datenstrom Yellow 0.7.3 Allows Unauthorized Article Deletion

CSRF Vulnerability in Datenstrom Yellow 0.7.3 Allows Unauthorized Article Deletion

CVE-2018-10758 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:P/A:P

The edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a delete action that can delete articles.

Learn more about our Web Application Penetration Testing UK.