CVE-2013-5708 in Coursemill Learning Management System

Riassunto

di MITRE

Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via vectors related to cookies, a different vulnerability than CVE-2013-3605.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 06/09/2013
• Divulgazione: 06/09/2013
• Moderazione: accettato
• Voce: VDB-64870
• CPE: pronto
• CWE: CWE-352 (confermato)
• CVSS: 6.8 (NVD)
• EPSS: 0.00698
• KEV: no
• Attività: molto basso
• Settore: Education, Police

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-5708
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-5708
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-5708/