Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qj7f-5543-55f6

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attackers to hijack the authentication of an administrator for requests that create new administrative users. NOTE: some of these details are obtained from third party information.

Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attackers to hijack the authentication of an administrator for requests that create new administrative users. NOTE: some of these details are obtained from third party information.

EPSS

Процентиль: 25%
0.00084
Низкий

Дефекты

CWE-352

Связанные уязвимости

nvd
почти 16 лет назад

Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attackers to hijack the authentication of an administrator for requests that create new administrative users. NOTE: some of these details are obtained from third party information.

EPSS

Процентиль: 25%
0.00084
Низкий

Дефекты

CWE-352