Security Advisory
CVE-2020-8439
6.5
MEDIUM
Vulnerability Description
Monstra CMS through 3.0.4 allows remote authenticated users to take over arbitrary user accounts via a modified login parameter to an edit URI, as demonstrated by login=victim to the users/21/edit URI.
Published Date
March 7, 2020
Official Source
NIST NVD Advisory