exploitDog

CVE-2013-3269

Опубликовано: 25 апр. 2013

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0 allows remote attackers to hijack the authentication of arbitrary users for requests that change mobile passwords, a different vulnerability than CVE-2013-2305.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cybozu:cybozu_office:*:*:*:*:*:*:*:*

Версия до 8 (включая)

cpe:2.3:a:cybozu:cybozu_office:6:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:cybozu_office:7:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:cybozu_office:9:*:*:*:*:*:*:*

cpe:2.3:a:cybozu:cybozu_office:9.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00164

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-3r8p-ffv9-xpjq

github

больше 3 лет назад

Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0 allows remote attackers to hijack the authentication of arbitrary users for requests that change mobile passwords, a different vulnerability than CVE-2013-2305.

EPSS

Процентиль: 38%

0.00164

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352