CVE-2011-0440 in Mahara

Riassunto

di MITRE

Cross-site request forgery (CSRF) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that delete blogs.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 12/01/2011
• Divulgazione: 28/03/2011
• Moderazione: accettato
• Voce: VDB-56950
• CPE: pronto
• CWE: CWE-352 (confermato)
• CVSS: 5.8 (NVD)
• EPSS: 0.01035
• KEV: no
• Attività: molto basso
• Settore: Hostingprovider, Agriculture, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-0440
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-0440
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-0440/