CVE-2015-5188

2015-10-2716:00:00

redhat

www.cve.org

9.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.5%

JSON

Cross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) before 2.0.0.CR9 allows remote attackers to hijack the authentication of administrators for requests that make arbitrary changes to an instance via vectors involving a file upload using a multipart/form-data submission.