Lucene search
+L

87 matches found

Prion
Prion
•added 2018/07/13 8:29 p.m.•24 views

Cross site request forgery (csrf)

CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery CSRF vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request...

6.8CVSS7.2AI score0.00863EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2018/07/13 8:00 p.m.•36 views

CVE-2016-6578 CodeLathe FileCloud, version 13.0.0.32841 and earlier, is vulnerable to cross-site request forgery (CSRF)

CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery CSRF vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request...

8.8AI score0.00863EPSS
SaveExploits0References2
CVE
CVE
•added 2018/07/13 8:00 p.m.•70 views

CVE-2016-6578

CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global Cross-Site Request Forgery (CSRF) vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request. Affected...

8.8CVSS8.8AI score0.00863EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2018/07/13 12:00 a.m.•5 views

PT-2018-4964

Name of the Vulnerable Software and Affected Versions CodeLathe FileCloud versions 13.0.0.32841 and earlier Description The issue allows an attacker to perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious...

8.8CVSS0.00863EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/13 12:00 a.m.•8 views

CVE-2016-6578: Cross-Site Request Forgery (CSRF)

CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery CSRF vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request...

8.8CVSS7.7AI score0.00863EPSS
SaveExploits0References3
CNVD
CNVD
•added 2017/01/17 12:00 a.m.•19 views

CodeLathe FileCloud Cross-Site Request Forgery Vulnerability

CodeLathe FileCloud is a file access, synchronization and sharing solution for on-premises use. A cross-site request forgery vulnerability exists in CodeLathe FileCloud version 13.0.0.32841 and earlier. A remote attacker can exploit this vulnerability to perform unauthorized operations...

8.8CVSS7AI score0.00863EPSS
SaveExploits0References1
CERT
CERT
•added 2017/01/13 12:00 a.m.•77 views

CodeLathe FileCloud is vulnerable to cross-site request forgery

Overview CodeLathe FileCloud, version 13.0.0.32841 and earlier, is vulnerable to cross-site request forgery CSRF. Description CWE-352: Cross-Site Request Forgery CSRF - CVE-2016-6578CodeLathe FileCloud is an "is an Enterprise File Access, Sync and Share solution that runs on-premise." FileCloud,...

8.8CVSS9AI score0.00863EPSS
SaveExploits0References3
Rows per page
Query Builder