CVE-2018-7216

Cross-site request forgery (CSRF) vulnerability in esop/toolkit/profile/regData.do in Bravo Tejari Procurement Portal allows remote authenticated users to…

published February 18, 2018

CVSS
—
EPSS
3%
Percentile
86.6
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in esop/toolkit/profile/regData.do in Bravo Tejari Procurement Portal allows remote authenticated users to hijack the authentication of application users for requests that modify their personal data by leveraging lack of anti-CSRF tokens.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02858 · 86.6th percentile
Published
2018-02-18T06:00Z
EPSS history
Timeline
  • 18 FEB 06:00Z
    Cross-site request forgery (CSRF) vulnerability in esop/toolkit/profile/regData.do in Bravo Tejari Procurement Portal allows remote authenticated users to…
    cvelistv5