NVD

Id
48710  
Name
CVE-2009-1434  
Description
Cross-site request forgery (CSRF) vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests that modify pages, change permissions, or change group memberships, as demonstrated by a URL for a (1) save or (2) view script in the SRC attribute of an IMG element, a related issue to CVE-2009-1339.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-04-30  
Modified Date
2009-05-14  
Seq
2009-1434  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
246088 48710 CVE-2009-1434 http://foswiki.org/Support/SecurityAlert-CVE-2009-1434  View
246089 48710 CVE-2009-1434 [foswiki-announce] 20090427 Security Alert CVE-2009-1434: Foswiki Page View Cross-Site Request Forgery (CSRF)  View
246090 48710 CVE-2009-1434 foswiki-unspecified-csrf(50256)  View
246091 48710 CVE-2009-1434 https://launchpad.net/bugs/cve/2009-1434  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42353 JVNDB-2009-003360 Foswiki におけるクロスサイトリクエストフォージェリの脆弱性 Foswiki には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2009-1434 38865 CVE-2009-1434 48710 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003360.html 2009-04-30 2012-06-26 View