CVE-2017-5473 in ntopng
Summary
Cross-site request forgery (CSRF) vulnerability in ntopng through 2.4 allows remote attackers to hijack the authentication of arbitrary users, as demonstrated by admin/add_user.lua, admin/change_user_prefs.lua, admin/delete_user.lua, and admin/password_reset.lua.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
01/13/2017
Disclosure
01/14/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 95343 | ntopng add_user.lua cross-site request forgery | 352 | Functional | Official fix | CVE-2017-5473 |