Lucene search
HistoryJun 19, 2015 - 2:59 p.m.
CVE-2015-4677
cve-2015-4677
csrf
vulnerability
fiverrscript
fiverr script
remote attackers
authentication
administrators
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
64.6%
Cross-site request forgery (CSRF) vulnerability in FiverrScript (aka Fiverr Script) 7.2 allows remote attackers to hijack the authentication of administrators for requests that create a new admin via a request to administrator/admins_create.php.
Affected configurations
Node
fiverrscriptfiverrscriptMatch7.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| fiverrscript:fiverrscript | fiverrscript | eq | 7.2 |
Related
prion
prion
Cross site request forgery (csrf)
2015-06-19 14:59:00
nvd
nvd
CVE-2015-4677
2015-06-19 14:59:05
cvelist
cvelist
CVE-2015-4677
2015-06-19 14:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
64.6%
Related for CVE-2015-4677