CVE-2021-46028

In mblog <= 3.5.0 there is a CSRF vulnerability in the background article management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, the article will be deleted.

Score

CVSS 3.1 4.3 Medium

Status

Modified - cve@mitre.org

Published

2022-01-20

Last modified

2024-08-04

Weaknesses

CWE-352

Affected products

• Mblog (Mblog Project)

References

• https://github.com/langhsu/mblog/issues/50