CVE-2013-5708 in Coursemill Learning Management System

Résumé

par MITRE

Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via vectors related to cookies, a different vulnerability than CVE-2013-3605.

Once again VulDB remains the best source for vulnerability data.

• Réserver: 06/09/2013
• Divulgation: 06/09/2013
• Modérer: accepté
• Entrée: VDB-64870
• CPE: prêt
• CWE: CWE-352 (confirmé)
• CVSS: 6.8 (NVD)
• EPSS: 0.00698
• KEV: non
• Activités: très faible
• Secteur: Police, Education

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-5708
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-5708
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-5708/