Lucene search

K
osvGoogleOSV:CVE-2018-14057
HistoryAug 17, 2018 - 6:29 p.m.

CVE-2018-14057

2018-08-1718:29:00
Google
osv.dev
6

AI Score

6.9

Confidence

Low

EPSS

0.005

Percentile

77.3%

Pimcore before 5.3.0 allows remote attackers to conduct cross-site request forgery (CSRF) attacks by leveraging validation of the X-pimcore-csrf-token anti-CSRF token only in the “Settings > Users / Roles” function.

AI Score

6.9

Confidence

Low

EPSS

0.005

Percentile

77.3%