CVE-2013-2754

Опубликовано: 11 мар. 2014

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in Umisoft UMI.CMS before 2.9 build 21905 allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a request to admin/users/add/user/do/.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:umi-cms:umi.cms:*:*:*:*:*:*:*:*

Версия до 2.9 (включая)

cpe:2.3:a:umi-cms:umi.cms:2.3.3.9:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.5.0:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.5.2:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.5.3:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.6:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.6.2:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.6.3:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.6.4:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.6.5:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.6.7:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.6.8:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.7.0:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.7.2:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.7.3:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.7.4:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.0:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.0.5:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.1:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.1.2:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.1.3:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.2:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.3:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.4:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.4.1:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.4.2:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.4.3:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.4.4:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.5:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.5.1:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.5.2:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.5.3:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.6:*:*:*:*:*:*:*

cpe:2.3:a:umi-cms:umi.cms:2.8.6.1:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00267

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-9v5g-g53w-f4xg

github

больше 3 лет назад