Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-25096

Опубликовано: 30 дек. 2023
Источник: nvd
CVSS3: 4.3
CVSS3: 8.8
CVSS2: 5
EPSS Низкий

Описание

A vulnerability was found in MdAlAmin-aol Own Health Record 0.1-alpha/0.2-alpha/0.3-alpha/0.3.1-alpha. It has been rated as problematic. This issue affects some unknown processing of the file includes/logout.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. Upgrading to version 0.4-alpha is able to address this issue. The patch is named 58b413aa40820b49070782c786c526850ab7748f. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-249191.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:petrk94:ownhealthrecord:*:*:*:*:*:*:*:*
Версия до 0.4 (исключая)

EPSS

Процентиль: 15%
0.0005
Низкий

4.3 Medium

CVSS3

8.8 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 4.3
github
около 2 лет назад

A vulnerability was found in MdAlAmin-aol Own Health Record 0.1-alpha/0.2-alpha/0.3-alpha/0.3.1-alpha. It has been rated as problematic. This issue affects some unknown processing of the file includes/logout.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. Upgrading to version 0.4-alpha is able to address this issue. The patch is named 58b413aa40820b49070782c786c526850ab7748f. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-249191.

EPSS

Процентиль: 15%
0.0005
Низкий

4.3 Medium

CVSS3

8.8 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-352