Cross site request forgery (csrf)

2018-07-1117:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.4%

JSON

Cross-site request forgery (CSRF) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers to hijack the authentication of authenticated users for requests that can obtain sensitive information via unspecified vectors.

CPENameOperatorVersion
topdeskeq5.7
topdeskeq5.7 service-release1
topdeskeq5.7 service-release2
topdeskeq5.7 service-release3
topdeskeq5.7 service-release4
topdeskeq5.7 service-release5
topdeskeq5.7 service-release6
topdeskeq5.7 service-release7
topdeskeq5.7 service-release8
topdeskge8.05.001

Name	Operator	Version
topdesk	eq	5.7
topdesk	eq	5.7 service-release1
topdesk	eq	5.7 service-release2
topdesk	eq	5.7 service-release3
topdesk	eq	5.7 service-release4
topdesk	eq	5.7 service-release5
topdesk	eq	5.7 service-release6
topdesk	eq	5.7 service-release7
topdesk	eq	5.7 service-release8
topdesk	ge	8.05.001