CVE-2019-1010095 Cross-site request forgery in DomainMOD
A CSRF vulnerability in DomainMOD allows attackers to add administrator accounts if an authenticated admin visits a malicious page.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2019-1010095?
CVE-2019-1010095 is a high-severity vulnerability in DomainMOD, published on 18 Jul 2019. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can add the administrator account. The component is: admin/users/add.php. The attack vector is: After the administrator logged in, open the html page.
Weakness: CWE-352
Which versions are affected by CVE-2019-1010095?
It affects 1 product.
Products include Domainmod Domainmod.
How do I fix CVE-2019-1010095?
No fix has been published for CVE-2019-1010095 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-1010095 being exploited?
There is no known exploitation of CVE-2019-1010095 in the wild and no public exploit code.
Other vulnerabilities in DomainMOD
Sources
Also known as GHSA-j8x7-w249-3r8p.