Lucene search
HistoryDec 30, 2013 - 3:30 p.m.
CVE-2013-7209
csrf
vulnerability
jforum
admin module
hijacking authentication
user group permissions
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.7%
Cross-site request forgery (CSRF) vulnerability in admBase/login.page in the Admin module in JForum allows remote attackers to hijack the authentication of administrators for requests that change the user group permissions of arbitrary users via a groupsSave action.
Affected configurations
Node
jforumjforumMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| jforum:jforum | jforum | eq | - |
Related
packetstorm
packetstorm
JForum Cross Site Request Forgery
2013-12-26 00:00:00
prion
prion
Cross site request forgery (csrf)
2013-12-30 15:30:00
seebug
seebug
JForum login.page adminUsers模块iyonghu权限跨站请求伪造漏洞
2013-12-30 00:00:00
cvelist
cvelist
CVE-2013-7209
2013-12-30 15:00:00
nvd
nvd
CVE-2013-7209
2013-12-30 15:30:16
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.7%
Related for CVE-2013-7209