CVE-2017-10680

Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to change a…

published June 29, 2017

CVSS
—
EPSS
1%
Percentile
68.4
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to change a private album to public via a crafted request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01218 · 68.4th percentile
Published
2017-06-29T21:00Z
EPSS history
Timeline
  • 29 JUN 21:00Z
    Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to change a…
    cvelistv5