Lucene search
HistoryFeb 19, 2015 - 3:59 p.m.
CVE-2015-1585
security
csrf
fat free crm
cve-2015-1585
nvd
6.5 Medium
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
73.8%
Fat Free CRM before 0.13.6 allows remote attackers to conduct cross-site request forgery (CSRF) attacks via a request without the authenticity_token, as demonstrated by a crafted HTML page that creates a new administrator account.
Affected configurations
Node
fatfreecrmfat_free_crmRange≤0.13.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| fatfreecrm:fat_free_crm | fatfreecrm fat free crm | le | 0.13.5 |
Related
packetstorm
packetstorm
Fat Free CRM 0.13.5 Cross Site Request Forgery
2015-02-16 00:00:00
zdt
zdt
Fat Free CRM 0.13.5 Cross Site Request Forgery Vulnerability
2015-02-16 00:00:00
cvelist
cvelist
CVE-2015-1585
2015-02-19 15:00:00
osv
osv
Fat Free CRM Cross-Site Request Forgery vulnerability
2022-05-14 02:49:30
github
github
Fat Free CRM Cross-Site Request Forgery vulnerability
2022-05-14 02:49:30
nvd
nvd
CVE-2015-1585
2015-02-19 15:59:14
prion
prion
Cross site request forgery (csrf)
2015-02-19 15:59:00
securityvulns
securityvulns
[CVE-2015-1585] Fat Free CRM - CSRF Vulnerability in Version 0.13.5
2015-02-22 00:00:00
6.5 Medium
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
73.8%
Related for CVE-2015-1585