CVE-2026-55742— Cotonti 跨站请求伪造漏洞

Cotonti CSRF in admin.rights.php allows privilege escalation

Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the administration rights handler. In system/admin/admin.rights.php, the rights update action ('a=update') modifies group access rights (including via cot_auth_add_group) without calling cot_check_xg() to validate the anti-CSRF token. A remote attacker who lures an authenticated administrator into visiting a malicious page can force the browser to submit a forged request that grants elevated permissions to an attacker-controlled group, escalating privileges to administrator. Because Cotonti administrators can modify templates and configuration, this can be further leveraged toward remote code execution.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

跨站请求伪造(CSRF)

Cotonti 跨站请求伪造漏洞

Cotonti Cotonti是Cotonti团队的一个内容管理系统。 Cotonti 1.0.0版本存在跨站请求伪造漏洞，该漏洞源于管理权限处理程序中跨站请求伪造问题，在system/admin/admin.rights.php文件中，权限更新操作未调用cot_check_xg()验证反CSRF令牌，可能导致远程攻击者诱骗经过身份验证的管理员访问恶意页面，提交伪造请求以授权攻击者控制的组提升权限至管理员，进而可用于远程代码执行。

N/A

N/A