CVE-2020-36534: Cross-Site Request Forgery in easyii CMS

June 8, 2022

A vulnerability was found in easyii CMS. It has been classified as problematic. Affected is an unknown function of the file /admin/sign/out. The manipulation leads to cross site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

References

github.com/advisories/GHSA-3x3w-vcjx-7796
github.com/noumo/easyii/
nvd.nist.gov/vuln/detail/CVE-2020-36534
vuldb.com/?id.160278

Code Behaviors & Features

Detect and mitigate CVE-2020-36534 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →