Cross site request forgery (csrf)

2012-03-0304:04:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.2%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allow remote attackers to hijack the authentication of arbitrary users for requests that modify data via the (1) commenting feature or (2) community script.

CPENameOperatorVersion
movable_typeeq5.51 open-source
movable_typeeq5.11 open-source
movable_typeeq4.291 open-source
movable_typeeq5.4 open-source
movable_typele4.37
movable_typeeq4.36 open-source
movable_typeeq5.1 open-source
movable_typeeq4.292 open-source
movable_typeeq4.361 open-source
movable_typeeq5.0 open-source

Name	Operator	Version
movable_type	eq	5.51 open-source
movable_type	eq	5.11 open-source
movable_type	eq	4.291 open-source
movable_type	eq	5.4 open-source
movable_type	le	4.37
movable_type	eq	4.36 open-source
movable_type	eq	5.1 open-source
movable_type	eq	4.292 open-source
movable_type	eq	4.361 open-source
movable_type	eq	5.0 open-source