CVE-2013-7209

Cross-site request forgery (CSRF) vulnerability in admBase/login.page in the Admin module in JForum allows remote attackers to hijack the authentication of…

published December 30, 2013

CVSS
—
EPSS
3%
Percentile
86.4
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in admBase/login.page in the Admin module in JForum allows remote attackers to hijack the authentication of administrators for requests that change the user group permissions of arbitrary users via a groupsSave action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02813 · 86.4th percentile
Published
2013-12-30T15:00Z
EPSS history
Timeline
  • 30 DEC 15:00Z
    Cross-site request forgery (CSRF) vulnerability in admBase/login.page in the Admin module in JForum allows remote attackers to hijack the authentication of…
    cvelistv5