CVE Catalog
CVE-2017-5959
CriticalSummary
In GeniXCMS before version 1.0.2, there is a vulnerability that allows CSRF token bypass, potentially leading to privilege escalation. The forgotpassword.php page can be used to acquire a token.
Risk Assessment
The organization may be exposed to unauthorized access to user accounts, which could lead to serious security breaches.
Recommendation
It is recommended to update GeniXCMS to version 1.0.2 or later and implement additional security measures against CSRF attacks.
Original NVD description (English source)
CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a token.