CVE-2013-7057 in SecureTransport
Сводка (Английский)
Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that upload arbitrary files via a crafted request to api/v1.0/files/.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Резервировать
11.12.2013
Раскрытие
04.11.2014
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 72790 | Axway SecureTransport подделка межсайтовых запросов | 352 | Доказательство концепции | Не определено | CVE-2013-7057 |