Lucene search
MitreCVE-2014-3854HistoryAug 07, 2014 - 11:13 a.m.
CVE-2014-3854
2014-08-0711:13:35
CWE-352
mitre
web.nvd.nist.gov
22
cve
2014
3854
csrf
vulnerability
pyplate 0.08
xss
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
High
EPSS
0.002
Percentile
58.4%
Cross-site request forgery (CSRF) vulnerability in admin/addScript.py in Pyplate 0.08 allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the title parameter.
Affected configurations
Node
pyplatepyplateMatch0.08
Related
nvd
nvd
CVE-2014-3854
2014-08-07 11:13:35
cvelist
cvelist
CVE-2014-3854
2014-08-07 10:00:00
prion
prion
Cross site request forgery (csrf)
2014-08-07 11:13:00
exploitdb
exploitdb
Pyplate - 'addScript.py' Cross-Site Request Forgery
2014-05-23 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
High
EPSS
0.002
Percentile
58.4%
Related for CVE-2014-3854