Lucene search

K
cvelistMitreCVELIST:CVE-2011-4452
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-4452

2022-10-0316:15:14
mitre
www.cve.org
cross-site request forgery
wikkawiki
adminusers
remote attackers
authentication
administrators
arbitrary user accounts
delete operation

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.3%

Cross-site request forgery (CSRF) vulnerability in the AdminUsers component in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to hijack the authentication of administrators for requests that remove arbitrary user accounts via a delete operation, as demonstrated by an {{image}} action.

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.3%