CVE-2015-2861

Cross-site request forgery CSRF vulnerability in Vesta Control Panel before 0.9.8-14 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-2861

CVE-2015-2861 affects Vesta Control Panel prior to version 0.9.8-14. It is a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to hijack the authentication of arbitrary users who have an active session. Root cause is CSRF in the web interface enabling actions with the victim...

Vesta Control Panel is vulnerable to cross-site request forgery

Overview Vesta Control Panel is vulnerable to a cross-site request forgery CSRF attack. Description CWE-352: Cross-Site Request Forgery CSRF- CVE-2015-2861Vesta Control Panel contains a cross-site request forgery CSRF vulnerability. An attacker can perform actions with the same permissions as a...