CVE-2009-3022

Опубликовано: 31 авг. 2009

Источник: nvd

CVSS3: 6.5

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in bingo!CMS 1.2 and earlier allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content via unspecified vectors.

Ссылки

http://jvn.jp/en/jp/JVN68640473/index.html
Third Party Advisory
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000058.html
Third Party Advisory
VDB Entry
http://osvdb.org/57425
Broken Link
http://secunia.com/advisories/36458
Broken Link
Vendor Advisory
http://www.bingo-cms.jp/security/jvn68640473.html
Broken Link
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/52838
Third Party Advisory
VDB Entry
http://jvn.jp/en/jp/JVN68640473/index.html
Third Party Advisory
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000058.html
Third Party Advisory
VDB Entry
http://osvdb.org/57425
Broken Link
http://secunia.com/advisories/36458
Broken Link
Vendor Advisory
http://www.bingo-cms.jp/security/jvn68640473.html
Broken Link
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/52838
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:itd-inc:bingo\!cms:*:-:commercial:*:*:*:*:*

Версия до 1.2 (включая)

cpe:2.3:a:itd-inc:bingo\!cms:*:-:core:*:*:*:*:*

Версия до 1.2 (включая)

EPSS

Процентиль: 37%

0.00161

Низкий

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-mg67-hj6h-72h8