CVE-2020-7210

Umbraco CMS 8.2.2 allows CSRF to enable/disable or delete user accounts.

• CWE-352

• http://packetstormsecurity.com/files/156062/Umbraco-CMS-8.2.2-Cross-Site-Request-Forgery.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2020/Jan/33Exploit, Mailing List, Third Party Advisory
• https://sec-consult.com/en/blog/advisories/cross-site-request-forgery-csrf-in-umbraco-cms/Exploit, Third Party Advisory
• https://sec-consult.com/en/vulnerability-lab/advisories/index.htmlThird Party Advisory
• https://seclists.org/bugtraq/2020/Jan/35Exploit, Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/156062/Umbraco-CMS-8.2.2-Cross-Site-Request-Forgery.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2020/Jan/33Exploit, Mailing List, Third Party Advisory
• https://sec-consult.com/en/blog/advisories/cross-site-request-forgery-csrf-in-umbraco-cms/Exploit, Third Party Advisory
• https://sec-consult.com/en/vulnerability-lab/advisories/index.htmlThird Party Advisory
• https://seclists.org/bugtraq/2020/Jan/35Exploit, Mailing List, Third Party Advisory

Published

Jan 23, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7203A potential security vulnerability has been identified in HP…9.8
• CVE-2020-7205A potential security vulnerability has been identified in HP…6.7
• CVE-2020-7206HP nagios plugin for iLO (nagios-plugins-hpilo v1.50 and ear…9.8
• CVE-2020-7207A local elevation of privilege using physical access securit…6.8
• CVE-2020-7208LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is …6.1
• CVE-2020-7209LinuxKI v6.0-1 and earlier is vulnerable to an remote code e…9.8
• CVE-2020-7211tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not pr…7.5
• CVE-2020-7212The _encode_invalid_chars function in util/url.py in the url…7.5
• CVE-2020-7213Parallels 13 uses cleartext HTTP as part of the update proce…7.5
• CVE-2020-7215An issue was discovered in Gallagher Command Centre 7.x befo…5.5
• CVE-2020-7216An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.…7.5
• CVE-2020-7217An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE…7.5