PT-2023-29440 · Unknown · Engelsystem

Name of the Vulnerable Software and Affected Versions: Engelsystem versions prior to the version containing commit ee7d30b33 Description: Engelsystem is a shift planning system for chaos events. A Blind SSRF in the "Import schedule" functionality makes it possible to perform a port scan against t...

Engelsystem Code Issue Vulnerability

Engelsystem is an open source shift scheduling system from Engelsystem. Engelsystem has a code issue vulnerability that stems from a Server Request Forgery SSRF vulnerability in the Import schedule feature...

CVE-2023-45152: Server-Side Request Forgery (SSRF)

Engelsystem is a shift planning system for chaos events. A Blind SSRF in the "Import schedule" functionality makes it possible to perform a port scan against the local environment. This vulnerability has been fixed in commit ee7d30b33. If a patch cannot be deployed, operators should ensure that n...

PT-2023-29633 · Unknown · Engelsystem

Name of the Vulnerable Software and Affected Versions: Engelsystem affected versions not specified Description: Engelsystem is a shift planning system for chaos events. If a user's password is compromised and an attacker gains access to the user's account, the attacker's session is not terminated...

Engelsystem Code Issue Vulnerability

Engelsystem is an open source shift planning system from Engelsystem. Engelsystem has a code issue vulnerability that stems from the current session not expiring after a password reset...

CVE-2023-45659: Insufficient Session Expiration

Engelsystem is a shift planning system for chaos events. If a users' password is compromised and an attacker gained access to a users' account, i.e., logged in and obtained a session, an attackers' session is not terminated if the users' account password is reset. This vulnerability has been fixe...

Engelsystem Cross-Site Request Forgery Vulnerability

Engelsystem is a shift planning system. The system includes features such as team management, event management, attendance management and mail system. A cross-site request forgery vulnerability exists in versions prior to Engelsystem commit hash 2e28336. A remote attacker can exploit this...

CVE-2018-19182

Engelsystem before commit hash 2e28336 allows CSRF...

CVE-2018-19182

Engelsystem before commit hash 2e28336 allows CSRF...

Cross site request forgery (csrf)

Engelsystem before commit hash 2e28336 allows CSRF...

CVE-2018-19182

Engelsystem before commit hash 2e28336 is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. The issue allows a remote attacker to induce unauthorized operations by persuading a user to submit a crafted request (the CVSS3 vector shows NETWORK, UI: REQUIRED, with HIGH impact on confide...

CVE-2018-19182

Engelsystem before commit hash 2e28336 allows CSRF...

CVE-2018-19182: Cross-Site Request Forgery (CSRF)

Engelsystem before commit hash 2e28336 allows CSRF...

PT-2018-14843

Name of the Vulnerable Software and Affected Versions Engelsystem versions prior to commit hash 2e28336 Description The issue allows for Cross-Site Request Forgery CSRF attacks. Recommendations For versions prior to commit hash 2e28336, update to a version that includes the fix, which is availabl...