
Vulnerabilities
Craft CMS Token Flaw Risks Cross-Site Data Mutation in Pre-5.11.0 Versions
A critical flaw in Craft CMS allows attackers to use valid tokens from one site to alter content on another, affecting versions prior to 5.11.0.
Everything RedTeam Log has reported about CWE-863: 2 stories, newest first. Part of our Vulnerabilities coverage.

A critical flaw in Craft CMS allows attackers to use valid tokens from one site to alter content on another, affecting versions prior to 5.11.0.

A critical authorization error in ColdFusion allows low-privileged attackers to run arbitrary code without interacting with users.