exploitDog

CVE-2018-6007

Опубликовано: 29 янв. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket.

Ссылки

https://packetstormsecurity.com/files/146135/Joomla-JS-Support-Ticket-1.1.0-Cross-Site-Request-Forgery.html
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/43912/
Exploit
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/146135/Joomla-JS-Support-Ticket-1.1.0-Cross-Site-Request-Forgery.html
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/43912/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:joomsky:js_support_ticket:1.1.0:*:*:*:*:joomla\!:*:*

EPSS

Процентиль: 53%

0.00306

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-9g26-7vw2-6f7q

CVSS3: 8.8

github

больше 3 лет назад

CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket.

EPSS

Процентиль: 53%

0.00306

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352