Vesta Control Panel Cross-Site Request Forgery Vulnerability (CNVD-2015-04122)

Vesta Control Panel is an open source web hosting control panel. Vesta Control Panel versions prior to 0.9.8-14 suffer from a cross-site request forgery vulnerability that allows remote attackers to hijack the authentication of arbitrary user identities...

Vesta Control Panel is vulnerable to cross-site request forgery

Overview Vesta Control Panel is vulnerable to a cross-site request forgery CSRF attack. Description CWE-352: Cross-Site Request Forgery CSRF- CVE-2015-2861Vesta Control Panel contains a cross-site request forgery CSRF vulnerability. An attacker can perform actions with the same permissions as a...