CVE-2013-7251

Multiple cross-site request forgery (CSRF) vulnerabilities in ProjectForge before 5.3 allow remote attackers to hijack the authentication of arbitrary users…

published January 2, 2014

CVSS
—
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

Multiple cross-site request forgery (CSRF) vulnerabilities in ProjectForge before 5.3 allow remote attackers to hijack the authentication of arbitrary users via vectors related to (1) web/admin/, (2) web/core/, (3) web/dialog/, (4) web/fibu/, (5) web/mobile/, (6) web/task/, or (7) web/wicket/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01103 · 65.5th percentile
Published
2014-01-02T11:00Z
EPSS history
Timeline
  • 02 JAN 11:00Z
    Multiple cross-site request forgery (CSRF) vulnerabilities in ProjectForge before 5.3 allow remote attackers to hijack the authentication of arbitrary users…
    cvelistv5