CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Konrád Koller ONet Regenerate Thumbnails onet-regenerate-thumbnails allows Cross Site Request Forgery.This issue affects ONet Regenerate Thumbnails: from n/a through <= 1.5.
Explanation of Vulnerability in Simple Terms
ONet Regenerate Thumbnails versions 1.5 and earlier are vulnerable to cross-site request forgery (CSRF). An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, triggers unwanted thumbnail regeneration or other administrative actions without the admin's knowledge or consent. The vulnerability requires the victim to visit the attacker's page while authenticated.
What an attacker can do
Trick a logged-in admin into performing unwanted actions like regenerating thumbnails or modifying site settings.
Potential impact on your site
Administrators could unknowingly trigger resource-intensive operations or have settings changed without their consent.
Conditions required to exploit
Admin must visit attacker's malicious webpage while logged into the site.
Key dates
External resources
Related vulnerabilities
