CVE-2012-1058

CVE-2012-1058

EPSS 0.9%

Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://osvdb.org/78923 http://packetstormsecurity.org/files/109507/Flyspray-0.9.9.6-Cross-Site-Request-Forgery.html http://secunia.com/advisories/47881 https://exchange.xforce.ibmcloud.com/vulnerabilities/73051 http://www.exploit-db.com/exploits/18468