CVE-2017-12789

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-05-10 · updated 2026-06-17
Weakness: CWE-352

Description

Metinfo 5.3.18 is affected by: Cross Site Request Forgery (CSRF). The impact is: Information Disclosure (remote). The component is: admin/interface/online/delete.php. The attack vector is: The administrator clicks on the malicious link in the login state.

Affected products

MetInfo CMS: 5.3.18

References

https://github.com/lemon666/vuln/blob/master/MetInfo5.3.md
https://github.com/lemon666/vuln/blob/master/MetInfo5.3.md

Get alerted when CVE-2017-12789 or the next vulnerability affects your stack