Lucene search

PRIOn knowledge basePRION:CVE-2011-4452

HistorySep 05, 2012 - 8:55 p.m.

Cross site request forgery (csrf)

2012-09-0520:55:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

51.9%

JSON

Cross-site request forgery (CSRF) vulnerability in the AdminUsers component in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to hijack the authentication of administrators for requests that remove arbitrary user accounts via a delete operation, as demonstrated by an {{image}} action.

CPENameOperatorVersion
wikkawikieq1.3.2
wikkawikieq1.3.1

CPE	Name	Operator	Version
	wikkawiki	eq	1.3.2
	wikkawiki	eq	1.3.1

References

wush.net/trac/wikka/changeset/1819

wush.net/trac/wikka/changeset/1832

wush.net/trac/wikka/ticket/1097

wush.net/trac/wikka/ticket/1098

7.5 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

51.9%

JSON

Related for PRION:CVE-2011-4452