29 matches found
Engelsystem Code Issue Vulnerability
Engelsystem is an open source shift scheduling system from Engelsystem. Engelsystem has a code issue vulnerability that stems from a Server Request Forgery SSRF vulnerability in the Import schedule feature...
PT-2023-29440 · Unknown · Engelsystem
Name of the Vulnerable Software and Affected Versions: Engelsystem versions prior to the version containing commit ee7d30b33 Description: Engelsystem is a shift planning system for chaos events. A Blind SSRF in the "Import schedule" functionality makes it possible to perform a port scan against t...
Engelsystem Code Issue Vulnerability
Engelsystem is an open source shift planning system from Engelsystem. Engelsystem has a code issue vulnerability that stems from the current session not expiring after a password reset...
Engelsystem Cross-Site Request Forgery Vulnerability
Engelsystem is a shift planning system. The system includes features such as team management, event management, attendance management and mail system. A cross-site request forgery vulnerability exists in versions prior to Engelsystem commit hash 2e28336. A remote attacker can exploit this...
CVE-2018-19182
Engelsystem before commit hash 2e28336 allows CSRF...
CVE-2018-19182
Engelsystem before commit hash 2e28336 allows CSRF...
Cross site request forgery (csrf)
Engelsystem before commit hash 2e28336 allows CSRF...
CVE-2018-19182
Engelsystem before commit hash 2e28336 is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. The issue allows a remote attacker to induce unauthorized operations by persuading a user to submit a crafted request (the CVSS3 vector shows NETWORK, UI: REQUIRED, with HIGH impact on confide...
