CVE-2017-8930

Multiple cross-site request forgery (CSRF) vulnerabilities in Simple Invoices 2013.1.beta.8 allow remote attackers to hijack the authentication of admins for…

published May 14, 2017

CVSS
—
EPSS
1%
Percentile
53.3
In the wild
Unconfirmed
What it is

Multiple cross-site request forgery (CSRF) vulnerabilities in Simple Invoices 2013.1.beta.8 allow remote attackers to hijack the authentication of admins for requests that can (1) create new administrator user accounts and take over the entire application, (2) create regular user accounts, or (3) change configuration parameters such as tax rates and the enable/disable status of PayPal payment modules.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00718 · 53.3th percentile
Published
2017-05-14T22:00Z
EPSS history
Timeline
  • 14 MAY 22:00Z
    Multiple cross-site request forgery (CSRF) vulnerabilities in Simple Invoices 2013.1.beta.8 allow remote attackers to hijack the authentication of admins for…
    cvelistv5