CVE-2012-4053

CVE-2012-4053

EPSS 0.6%

Cross-site request forgery (CSRF) vulnerability in eZOE flash player in eZ Publish 4.1 through 4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/83676 http://secunia.com/advisories/49812 https://exchange.xforce.ibmcloud.com/vulnerabilities/76811 http://share.ez.no/community-project/security-advisories/ezsa-2012-009-ezoe-flash-player-csrf-security-issues