29 matches found
PT-2023-29633 · Unknown · Engelsystem
Name of the Vulnerable Software and Affected Versions: Engelsystem affected versions not specified Description: Engelsystem is a shift planning system for chaos events. If a user's password is compromised and an attacker gains access to the user's account, the attacker's session is not terminated...
Engelsystem Code Issue Vulnerability
Engelsystem is an open source shift scheduling system from Engelsystem. Engelsystem has a code issue vulnerability that stems from a Server Request Forgery SSRF vulnerability in the Import schedule feature...
Engelsystem Code Issue Vulnerability
Engelsystem is an open source shift planning system from Engelsystem. Engelsystem has a code issue vulnerability that stems from the current session not expiring after a password reset...
Engelsystem Cross-Site Request Forgery Vulnerability
Engelsystem is a shift planning system. The system includes features such as team management, event management, attendance management and mail system. A cross-site request forgery vulnerability exists in versions prior to Engelsystem commit hash 2e28336. A remote attacker can exploit this...
CVE-2018-19182
Engelsystem before commit hash 2e28336 allows CSRF...
CVE-2018-19182
Engelsystem before commit hash 2e28336 allows CSRF...
Cross site request forgery (csrf)
Engelsystem before commit hash 2e28336 allows CSRF...
CVE-2018-19182
Engelsystem before commit hash 2e28336 is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. The issue allows a remote attacker to induce unauthorized operations by persuading a user to submit a crafted request (the CVSS3 vector shows NETWORK, UI: REQUIRED, with HIGH impact on confide...
