Cross site request forgery (csrf)

2018-06-2215:29:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.5%

SLiMS 8 Akasia 8.3.1 allows remote attackers to bypass the CSRF protection mechanism and obtain admin access by omitting the csrf_token parameter.

CPENameOperatorVersion
slims_akasiaeq8.3.1

CPE	Name	Operator	Version
	slims_akasia	eq	8.3.1

References

github.com/slims/slims8_akasia/issues/103