Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f562-34hv-qg95

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php.

Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php.

EPSS

Процентиль: 52%
0.00286
Низкий

Дефекты

CWE-20

Связанные уязвимости

ubuntu
около 13 лет назад

Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php.

nvd
около 13 лет назад

Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php.

debian
около 13 лет назад

Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attacke ...

EPSS

Процентиль: 52%
0.00286
Низкий

Дефекты

CWE-20