Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-8BBF25729DD383C77899D4A15BBDC458HistoryApr 01, 2016 - 12:00 a.m.
Cross-site request forgery
2016-04-0100:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
12
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Administrate::ApplicationController actions don’t have CSRF protection. Remote attackers can hijack user’s sessions and use any functionality that administrate exposes on their behalf.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gem/administrate | lt | 0.1.5 |
Related
github
github
administrate vulnerable to Cross-Site Request Forgery
2022-08-06 00:00:47
prion
prion
Cross site request forgery (csrf)
2022-08-05 16:15:00
osv
osv
administrate vulnerable to Cross-Site Request Forgery
2022-08-06 00:00:47
CVE-2016-3098
2022-08-05 16:15:09
cve
cve
CVE-2016-3098
2022-08-05 16:15:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Related for GITLAB-8BBF25729DD383C77899D4A15BBDC458