CVE-2018-19829

Опубликовано: 18 дек. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 5.8

EPSS Низкий

Описание

Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/lista_usuarios, resulting in the ability to delete an arbitrary user when the ID number is known.

Ссылки

https://hackpuntes.com/cve-2018-19829-integria-ims-5-0-83-cross-site-request-forgery/
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/46013/
Exploit
Third Party Advisory
VDB Entry
https://hackpuntes.com/cve-2018-19829-integria-ims-5-0-83-cross-site-request-forgery/
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/46013/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:artica:integria_ims:5.0.83:*:*:*:*:*:*:*

EPSS

Процентиль: 55%

0.0032

Низкий

6.5 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-x68j-9482-g532