CVE-2017-2102 in AppGoat for Web Application

Riassunto

di MITRE

Cross-site request forgery (CSRF) vulnerability in Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 01/12/2016
• Divulgazione: 28/04/2017
• Moderazione: accettato
• Voce: VDB-100664
• CPE: pronto
• CWE: CWE-352 (confermato)
• CVSS: 8.8 (NVD)
• EPSS: 0.00769
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-2102
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-2102
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-2102/