Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f562-34hv-qg95

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php.

Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php.

EPSS

Процентиль: 69%
0.01338
Низкий

Дефекты

CWE-20

Связанные уязвимости

ubuntu
больше 13 лет назад

Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php.

nvd
больше 13 лет назад

Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php.

debian
больше 13 лет назад

Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attacke ...

EPSS

Процентиль: 69%
0.01338
Низкий

Дефекты

CWE-20