Lucene search

K
osvGoogleOSV:DLA-485-1
HistoryMay 22, 2016 - 12:00 a.m.

extplorer - security update

2016-05-2200:00:00
Google
osv.dev
3

0.002 Low

EPSS

Percentile

52.2%

This security update fixes a security issue in extplorer. We recommend you
upgrade your extplorer package.

  • CVE-2015-5660
    Cross-site request forgery (CSRF) vulnerability allows remote
    attackers to hijack the authentication of arbitrary users for
    requests that execute PHP code.

Further information about Debian LTS security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: <https://wiki.debian.org/LTS&gt;

For Debian 7 Wheezy, these issues have been fixed in extplorer version 2.1.0b6+dfsg.3-4+deb7u3

0.002 Low

EPSS

Percentile

52.2%