CVE-2018-25096CWE-352

MdAlAmin-aol Own Health Record logout.php cross-site request forgery

Medium · published December 30, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
23.1
In the wild
Unconfirmed
What it is

A vulnerability was found in MdAlAmin-aol Own Health Record 0.1-alpha/0.2-alpha/0.3-alpha/0.3.1-alpha. It has been rated as problematic. This issue affects some unknown processing of the file includes/logout.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. Upgrading to version 0.4-alpha is able to address this issue. The patch is named 58b413aa40820b49070782c786c526850ab7748f. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-249191.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00315 · 23.1th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2023-12-30T09:31Z
EPSS history
Timeline
  • 30 DEC 09:31Z
    MdAlAmin-aol Own Health Record logout.php cross-site request forgery
    cvelistv5