Razor@0.7.2 Security Vulnerabilities and Issues — Razor@0.7.2 CVE List

Lucene search

CobubRazor0.7.2

3 matches found

CVE•added 2018/03/07 5:29 p.m.•61 views

CVE-2018-7745

An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/install/installation/createuserinfo requests, resulting in account creation.

7.5CVSS7.5AI score0.17299EPSS

CVE•added 2018/03/07 5:29 p.m.•43 views

CVE-2018-7746

An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/manage/channel/modifychannel. For example, with a crafted channel name, stored XSS is triggered during a later /index.php?/manage/channel request by an admin.

8.8CVSS8.1AI score0.01339EPSS

CVE•added 2018/03/07 8:29 a.m.•33 views

CVE-2018-7720

A cross-site request forgery (CSRF) vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting in account creation.

8.8CVSS8.7AI score0.00342EPSS