CVE-2013-7259

Multiple cross-site request forgery (CSRF) vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrators for requests…

published April 29, 2014

CVSS
—
EPSS
1%
Percentile
69.2
In the wild
Unconfirmed
What it is

Multiple cross-site request forgery (CSRF) vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary code, as demonstrated by a request to (1) db/data/ext/GremlinPlugin/graphdb/execute_script or (2) db/manage/server/console/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01253 · 69.2th percentile
Published
2014-04-29T14:00Z
EPSS history
Timeline
  • 29 APR 14:00Z
    Multiple cross-site request forgery (CSRF) vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrators for requests…
    cvelistv5