CVE-2016-7507

Опубликовано: 19 июл. 2017

Источник: debian

Описание

Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an admin account in the application.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
glpi	removed			package

Примечания

Only supported behind an authenticated HTTP zone

Связанные уязвимости

CVE-2016-7507

CVSS3: 8

ubuntu

около 9 лет назад

Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an admin account in the application.

CVE-2016-7507

CVSS3: 8

nvd

около 9 лет назад

Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an admin account in the application.

GHSA-q8q2-v69p-mpm8

CVSS3: 8

github

больше 4 лет назад

Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an admin account in the application.