Design/Logic Flaw

2017-07-1814:29:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.9%

REDCap before 7.5.1 has CSRF in the deletion feature of the File Repository and File Upload components.

CPENameOperatorVersion
redcaple7.5.0

CPE	Name	Operator	Version
	redcap	le	7.5.0

References

community.projectredcap.org/articles/13/changelog-standard-release.html

gist.github.com/jordanpotti/fef4f1ada404d5ba7f88ab42e93cdaae