Lucene search
K

5 matches found

NVD
NVD
added 2018/07/13 8:29 p.m.15 views

CVE-2016-6578

CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery CSRF vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request...

8.8CVSS8.8AI score0.00874EPSS
Exploits0References2
Prion
Prion
added 2018/07/13 8:29 p.m.10 views

Cross site request forgery (csrf)

CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery CSRF vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request...

6.8CVSS7.2AI score0.00874EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2018/07/13 8:0 p.m.16 views

CVE-2016-6578 CodeLathe FileCloud, version 13.0.0.32841 and earlier, is vulnerable to cross-site request forgery (CSRF)

CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery CSRF vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request...

8.8AI score0.00874EPSS
Exploits0References2
CVE
CVE
added 2018/07/13 8:0 p.m.46 views

CVE-2016-6578

CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global Cross-Site Request Forgery (CSRF) vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request. Affected...

8.8CVSS8.8AI score0.00874EPSS
Exploits0References2Affected Software1
CERT
CERT
added 2017/01/13 12:0 a.m.55 views

CodeLathe FileCloud is vulnerable to cross-site request forgery

Overview CodeLathe FileCloud, version 13.0.0.32841 and earlier, is vulnerable to cross-site request forgery CSRF. Description CWE-352: Cross-Site Request Forgery CSRF - CVE-2016-6578CodeLathe FileCloud is an "is an Enterprise File Access, Sync and Share solution that runs on-premise." FileCloud,...

8.8CVSS9AI score0.00874EPSS
Exploits0References3
Rows per page
Query Builder