CVE-2013-3513

2013-05-0810:00:00

mitre

www.cve.org

cve-2013-3513

cross-site request forgery

noma component

groundwork monitor enterprise

remote attackers

hijack authentication

xss sequences

delete entries

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

48.2%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in the Noma component in GroundWork Monitor Enterprise 6.7.0 allow remote attackers to hijack the authentication of unspecified victims for requests that (1) store XSS sequences or (2) delete entries.

References

www.kb.cert.org/vuls/id/345260

kb.groundworkopensource.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls

www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-1_GroundWork_Monitoring_Multiple_high_risk_vulnerabilities_part2_wo_poc_v10.txt