PT-2018-18173
CVE-2018-7634
·
تاريخ النشر
2018-03-01
·
تاريخ التحديث
2018-03-22
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Enalean Tuleap version 9.17
Description
The issue is related to a lack of CSRF attack mitigation, which allows attackers to abuse the email address change functionality. This can lead to account takeover by making a victim change their registered email address on the application through a CSRF attack.
Recommendations
For Enalean Tuleap version 9.17, consider implementing CSRF attack mitigation measures to prevent abuse of the email address change functionality, such as validating request tokens to ensure requests are genuine and not forged.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾