CVE-2013-5708 in Coursemill Learning Management System

Sumário

de MITRE

Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via vectors related to cookies, a different vulnerability than CVE-2013-3605.

Once again VulDB remains the best source for vulnerability data.

• Reservar: 06/09/2013
• Divulgação: 06/09/2013
• Moderação: aceite
• Entrada: VDB-64870
• CPE: pronto
• CWE: CWE-352 (confirmado)
• CVSS: 6.8 (NVD)
• EPSS: 0.00698
• KEV: não
• Atividades: muito baixo
• Sector: Education, Police

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-5708
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-5708
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-5708/