Lucene search
+L

2 matches found

NVD
NVD
added 2014/04/29 2:38 p.m.25 views

CVE-2013-7259

Multiple cross-site request forgery CSRF vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary code, as demonstrated by a request to 1 db/data/ext/GremlinPlugin/graphdb/executescript or 2 db/manage/server/console/...

6.8CVSS7.8AI score0.01253EPSS
SaveExploits0References4
CVE
CVE
added 2014/04/29 2:0 p.m.57 views

CVE-2013-7259

CVE-2013-7259 refers to multiple CSRF vulnerabilities in Neo4j 1.9.2. The flaw allows remote attackers to hijack administrator authentication and perform requests that can execute arbitrary code, demonstrated via (1) db/data/ext/GremlinPlugin/graphdb/execute_script and (2) db/manage/server/consol...

6.8CVSS8AI score0.01253EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder