CVE-2026-40326— Masa CMS 跨站请求伪造漏洞

Masa CMS CSRF in site bundle creation allows unauthorized site data export

Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the createBundle method in `csettings.cfc` does not properly validate anti-CSRF tokens for site bundle creation requests. An attacker can craft a malicious webpage or link that, when visited by a logged-in administrator, triggers the silent creation of a comprehensive site bundle. This bundle is saved to a predictable, publicly accessible web directory. An unauthenticated attacker can then retrieve the bundle and obtain site content, user account data, password hashes, form submissions, email lists, plugins, and configuration data. This issue has been fixed in versions 7.2.10, 7.3.15, 7.4.10, and 7.5.3. As a workaround, remove unexpected bundle files from public directories, restrict access to the affected endpoint, and limit exposure of administrative sessions.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

跨站请求伪造(CSRF)

Masa CMS 跨站请求伪造漏洞

Masa CMS是Masa CMS组织的一个数字体验平台。 Masa CMS 7.5.2及之前版本存在跨站请求伪造漏洞，该漏洞源于csettings.cfc中的createBundle方法未正确验证反CSRF令牌，可能导致攻击者诱导管理员创建站点捆绑包并保存到可预测的公开目录，使未经身份验证的攻击者获取站点内容、用户账户数据、密码哈希等敏感信息。

N/A

N/A