Lucene search
HistoryDec 11, 2023 - 2:15 p.m.
CVE-2023-6671
ojs
csrf
vulnerability
2023
cross-site request forgery
attack
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
24.3%
A vulnerability has been discovered on OJS, that consists in a CSRF (Cross-Site Request Forgery) attack that forces an end user to execute unwanted actions on a web application in which they’re currently authenticated.
Affected configurations
Node
openjournalsystemsopen_journal_systemsMatch3.3.0.13
Related
cve
cve
CVE-2023-6671
2023-12-11 14:15:32
prion
prion
Cross site request forgery (csrf)
2023-12-11 14:15:00
cvelist
cvelist
CVE-2023-6671 Cross-Site Request Forgery on OPEN JOURNAL SYSTEMS
2023-12-11 13:53:59
nessus
nessus
Trellix Enterprise Security Manager < 11.6.9 Command Injection
2023-11-30 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
24.3%
Related for NVD:CVE-2023-6671