Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-98v5-fr36-cc8r

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

Mahara 1.9 before 1.9.8 and 1.10 before 1.10.6 and 15.04 before 15.04.3 are vulnerable to perform a cross-site request forgery (CSRF) attack on the uploader contained in Mahara's filebrowser widget. This could allow an attacker to trick a Mahara user into unknowingly uploading malicious files into their Mahara account.

Mahara 1.9 before 1.9.8 and 1.10 before 1.10.6 and 15.04 before 15.04.3 are vulnerable to perform a cross-site request forgery (CSRF) attack on the uploader contained in Mahara's filebrowser widget. This could allow an attacker to trick a Mahara user into unknowingly uploading malicious files into their Mahara account.

EPSS

Процентиль: 29%
0.00104
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 6.8
nvd
больше 8 лет назад

Mahara 1.9 before 1.9.8 and 1.10 before 1.10.6 and 15.04 before 15.04.3 are vulnerable to perform a cross-site request forgery (CSRF) attack on the uploader contained in Mahara's filebrowser widget. This could allow an attacker to trick a Mahara user into unknowingly uploading malicious files into their Mahara account.

CVSS3: 6.8
debian
больше 8 лет назад

Mahara 1.9 before 1.9.8 and 1.10 before 1.10.6 and 15.04 before 15.04. ...

EPSS

Процентиль: 29%
0.00104
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-352