← All advisories

Medium severity6.5NVD Advisory· Published Jul 14, 2021· Updated Jun 17, 2026

CVE-2020-18151

CVE-2020-18151

Description

Cross Site Request Forgery (CSRF) vulnerability in ThinkCMF v5.1.0, which can add an admin account.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
thinkcmf/thinkcmfPackagist	< 6.0.8	6.0.8

Affected products

2

ThinkCMF/ThinkCMFdescription
ghsa-coords
pkg:composer/thinkcmf/thinkcmf
Range: < 6.0.8

Patches

Vulnerability mechanics

References

6

github.com/thinkcmf/thinkcmf/issues/580nvdExploitIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-842m-vp3r-qwwrghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-18151ghsaADVISORY
github.com/thinkcmf/thinkcmf/commit/321faa20865e74540e5f0a63e4c3f4ea75093d59ghsaWEB
github.com/thinkcmf/thinkcmf/commit/b61636134aa57d4693967f35772200c779099740ghsaWEB
github.com/thinkcmf/thinkcmf/issues/736ghsaWEB

News mentions

0

No linked articles in our index yet.