← All advisories

High severity8.8NVD Advisory· Published Jul 6, 2019· Updated Jun 17, 2026

CVE-2019-13370

CVE-2019-13370

Description

index.php/admin/permissions in Ignited CMS through 2017-02-19 allows CSRF to add an administrator.

Affected products

3

ignitedcms/Ignitedcms2 versions
cpe:2.3:a:ignitedcms:ignitedcms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ignitedcms:ignitedcms:*:*:*:*:*:*:*:*range: <=2017-02-19
- (no CPE)range: <=2017-02-19
Ignited CMS/Ignited CMSdescription

Patches

Vulnerability mechanics

References

1

github.com/ignitedcms/ignitedcms/issues/7nvdBroken LinkExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.