VYPR
← All advisories
High severity8.8NVD Advisory· Published Mar 4, 2020· Updated Jun 17, 2026

CVE-2020-10057

CVE-2020-10057

Description

GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an incomplete fix for CVE-2015-2680, in which "token" is used as a CSRF protection mechanism, but without validation that "token" is associated with an administrative user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Genixcms/Genixcms2 versions
    cpe:2.3:a:metalgenix:genixcms:1.1.7:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:metalgenix:genixcms:1.1.7:*:*:*:*:*:*:*
    • (no CPE)range: =1.1.7
  • GeniXCMS/GeniXCMSdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.