What’s Vulnerable › Vulnerabilities

CVE-2020-8439

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-03-07 · updated 2026-06-17
• Weakness: CWE-425

Description

Monstra CMS through 3.0.4 allows remote authenticated users to take over arbitrary user accounts via a modified login parameter to an edit URI, as demonstrated by login=victim to the users/21/edit URI.

Affected products

• Monstra: through 3.0.4

References

• http://uploadboy.me/cn40ne6p89t6/POC.mp4.html
• https://cert.ikiu.ac.ir/public-files/pages/attachments/11/02630f153869936d555a79f89d717f9c.pdf
• http://uploadboy.me/cn40ne6p89t6/POC.mp4.html
• https://cert.ikiu.ac.ir/public-files/pages/attachments/11/02630f153869936d555a79f89d717f9c.pdf

Get alerted when CVE-2020-8439 or the next vulnerability affects your stack