Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f45m-59v3-7mp7

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to hijack the authentication of administrators for requests that delete employees.

Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to hijack the authentication of administrators for requests that delete employees.

EPSS

Процентиль: 27%
0.00096
Низкий

8 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8
nvd
больше 9 лет назад

Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to hijack the authentication of administrators for requests that delete employees.

EPSS

Процентиль: 27%
0.00096
Низкий

8 High

CVSS3

Дефекты

CWE-352