← Database

CVE-2022-40489

HIGH CVSS: 8.8 Published: 2022-12-01 Modified: 2026-06-17

Description

ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.

Affected Platforms

Thinkcmf Thinkcmf

Weakness Type

CWE-352, CWE-352

References