CVE-2010-5085 in Amethyst

Sumário (Inglês)

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/update_user in Hulihan Amethyst 0.1.5, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that (1) change the administrative password or (2) change the site s configuration.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

14/02/2012

Divulgação

14/02/2012

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
60204	Hulihanapplications Amethyst Falsificação de Pedido entre Sites	352	Prova de conceito	Correção oficial	CVE-2010-5085

Fontes

• MITRE
• NVD
• CVE Details