CVE-2012-1058 in Flyspray

Summary

Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 02/13/2012
• Disclosure: 02/13/2012
• Moderation: VulDB entry created
• Entries: VDB-60168 (1)
• CPE: ready
• CWE: CWE-352 (Confirmed)
• Exploit: Download
• CVSS: 5.5
• EPSS: 0.00294
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-1058
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-1058
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-1058/