PT-2017-5155
CVE-2012-4568
·
Published
2017-10-23
·
Updated
2017-11-14
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
LetoDMS versions prior to 3.3.8
Description:
The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified.
Recommendations:
For versions prior to 3.3.8, update to version 3.3.8 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾