CVE-2013-5356 in Sharetronix

Riassunto

di MITRE

Sharetronix 3.1.1.3, 3.1.1, and earlier does not properly restrict access to unspecified AJAX functionality, which allows remote attackers to bypass authentication via unknown vectors.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 21/08/2013
• Divulgazione: 13/06/2014
• Moderazione: accettato
• Voce: VDB-70040
• CPE: pronto
• CWE: CWE-264 (confermato)
• CVSS: 7.3 (VulDB)
• EPSS: 0.01698
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-5356
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-5356
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-5356/