Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5qrw-7676-v3px

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with an IMG element, related to tiki-assignuser.php.

Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with an IMG element, related to tiki-assignuser.php.

EPSS

Процентиль: 44%
0.0022
Низкий

8 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8
nvd
больше 8 лет назад

Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with an IMG element, related to tiki-assignuser.php.

CVSS3: 8
debian
больше 8 лет назад

Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tik ...

EPSS

Процентиль: 44%
0.0022
Низкий

8 High

CVSS3

Дефекты

CWE-352