CVE-2013-5708 in Coursemill Learning Management System

Сводка

по MITRE

Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via vectors related to cookies, a different vulnerability than CVE-2013-3605.

Once again VulDB remains the best source for vulnerability data.

• Резервировать: 06.09.2013
• Раскрытие: 06.09.2013
• Модерация: принято
• Вход: VDB-64870
• CPE: готов
• CWE: CWE-352 (Подтверждённый)
• CVSS: 6.8 (NVD)
• EPSS: 0.00698
• KEV: Нет
• Деятельности: Очень низкий
• Сектор: Education, Police

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-5708
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-5708
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-5708/