Monday, January 15, 2018

CVE-2018-5329

Description. ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) on /CWEBNET/* authenticated pages. A successful CSRF attack can force the user to modify state: creating users, changing an email address, and so forth. If the victim is an administrative ...

from Google Alert - vulnerability http://ift.tt/2DinrAf
via IFTTT

No comments:

Post a Comment