Lucene search
+L

3 matches found

NVD
NVD
•added 2018/03/20 7:29 a.m.•35 views

CVE-2018-8811

Cross-site request forgery CSRF vulnerability in system/workplace/admin/accounts/userrole.jsp in OpenCMS 10.5.3 allows remote attackers to hijack the authentication of administrative users for requests that perform privilege escalation. Note: It is argued that OpenCMS allows only registered users...

8.8CVSS9.1AI score0.02108EPSS
SaveExploits5References2
Cvelist
Cvelist
•added 2018/03/20 7:00 a.m.•43 views

CVE-2018-8811

Cross-site request forgery CSRF vulnerability in system/workplace/admin/accounts/userrole.jsp in OpenCMS 10.5.3 allows remote attackers to hijack the authentication of administrative users for requests that perform privilege escalation. Note: It is argued that OpenCMS allows only registered users...

9.1AI score0.02108EPSS
SaveExploits5References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/20 12:00 a.m.•2 views

CVE-2018-8811: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in system/workplace/admin/accounts/userrole.jsp in OpenCMS 10.5.3 allows remote attackers to hijack the authentication of administrative users for requests that perform privilege escalation. Note: It is argued that OpenCMS allows only registered users...

8.8CVSS7.8AI score0.02108EPSS
SaveExploits5References2
Rows per page
Query Builder