Lucene search

K
prionPRIOn knowledge basePRION:CVE-2013-4889
HistoryJan 29, 2014 - 6:55 p.m.

Cross site request forgery (csrf)

2014-01-2918:55:00
PRIOn knowledge base
www.prio-n.com
2

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Digital Signage Xibo 1.4.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add a new administrator via the AddUser action or (2) conduct cross-site scripting (XSS) attacks, as demonstrated by CVE-2013-4888.

CPENameOperatorVersion
xiboeq1.4.2

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

Related for PRION:CVE-2013-4889