Cross site request forgery (csrf)

2017-07-2413:29:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.2%

In SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email form) can insert XSS sequences via the user parameter.

CPENameOperatorVersion
simpleriskeq20170614.0.1

CPE	Name	Operator	Version
	simplerisk	eq	20170614.0.1

References

www.seekurity.com/blog/general/reflected-xss-vulnerability-in-simplerisk/

www.youtube.com/watch?v=jOUKEYW0RQw