CVE-2017-5473

Cross-site request forgery (CSRF) vulnerability in ntopng through 2.4 allows remote attackers to hijack the authentication of arbitrary users, as demonstrated…

published January 14, 2017

CVSS
—
EPSS
4%
Percentile
89.1
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in ntopng through 2.4 allows remote attackers to hijack the authentication of arbitrary users, as demonstrated by admin/add_user.lua, admin/change_user_prefs.lua, admin/delete_user.lua, and admin/password_reset.lua.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03525 · 89.1th percentile
Published
2017-01-14T06:56Z
EPSS history
Timeline
  • 14 JAN 06:56Z
    Cross-site request forgery (CSRF) vulnerability in ntopng through 2.4 allows remote attackers to hijack the authentication of arbitrary users, as demonstrated…
    cvelistv5