Lucene search

K
cvelistMitreCVELIST:CVE-2010-1732
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-1732

2022-10-0316:21:00
mitre
www.cve.org
1
cve-2010-1732
cross-site request forgery
zikula application framework
administrators
updateemail action

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.5%

Cross-site request forgery (CSRF) vulnerability in the users module in Zikula Application Framework before 1.2.3 allows remote attackers to hijack the authentication of administrators for requests that change the administrator email address (updateemail action).

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.5%

Related for CVELIST:CVE-2010-1732