Enhancement: cves/2020/CVE-2020-5776.yaml by mp

cves/2020/CVE-2020-5776.yaml

@@ -1,12 +1,13 @@
 id: CVE-2020-5776
 
 info:
-  name: Cross Site Request Forgery (CSRF) in MAGMI (Magento Mass Importer) Plugin
+  name: MAGMI - Cross-Site Request Forgery
   author: dwisiswant0
   severity: high
-  description: Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens. RCE (via phpcli command) is possible in the event that a CSRF is leveraged against an existing admin session for MAGMI.
+  description: MAGMI (Magento Mass Importer) is vulnerable to cross-site request forgery (CSRF) due to the lack of CSRF tokens. Remote code execution (via phpcli command) is also possible in the event that  CSRF is leveraged against an existing admin session.
   reference:
     - https://www.tenable.com/security/research/tra-2020-51
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-5776
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
     cvss-score: 8.8
@@ -45,4 +46,6 @@ requests:
         condition: and
       - type: status
         status:
-          - 200
+          - 200
+
+# Enhanced by mp on 2022/06/28