PT-2014-8397
CVE-2014-8073
·
تاريخ النشر
2014-10-23
·
تاريخ التحديث
2017-09-08
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
OpenMRS version 2.1 Standalone Edition
Description
A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators for requests that add a new user via a Save User action to "admin/users/user.form".
Recommendations
For OpenMRS version 2.1 Standalone Edition, consider disabling the Save User action in the admin/users/user.form until a patch is available to prevent exploitation of this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾