Lucene search

K
cvelistMitreCVELIST:CVE-2018-14057
HistoryAug 17, 2018 - 6:00 p.m.

CVE-2018-14057

2018-08-1718:00:00
mitre
www.cve.org
8

AI Score

8.8

Confidence

High

EPSS

0.005

Percentile

77.3%

Pimcore before 5.3.0 allows remote attackers to conduct cross-site request forgery (CSRF) attacks by leveraging validation of the X-pimcore-csrf-token anti-CSRF token only in the “Settings > Users / Roles” function.

AI Score

8.8

Confidence

High

EPSS

0.005

Percentile

77.3%