CVE-2018-15682

2018-09-0521:00:00

mitre

www.cve.org

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.1%

JSON

An issue was discovered in BTITeam XBTIT. Due to a lack of cross-site request forgery protection, it is possible to automate the action of sending private messages to users by luring an authenticated user to a web page that automatically submits a form on their behalf.

References

rastating.github.io/xbtit-multiple-vulnerabilities/