PT-2008-2104 · Woltlab · Woltlab Burning Board

Nbbn · Publicado 2008-01-29 · Atualizado 2018-10-15 · CVE-2008-0472

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Woltlab Burning Board (wBB) version 2.3.6 PL2

Description A cross-site request forgery (CSRF) issue exists, allowing remote attackers to perform actions such as deleting threads, potentially impersonating moderators or administrators.

Recommendations For version 2.3.6 PL2, consider implementing validation for requests to prevent unauthorized actions, such as verifying the origin of the request to prevent CSRF attacks. As a temporary workaround, restrict access to the modcp.php file, specifically the thread del action, to minimize the risk of exploitation.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2008-0472

Produtos afetados

Woltlab Burning Board

Referências · 6

• http://securityreason.com/securityalert/3586 · Nota
• http://secunia.com/advisories/28634 · Aviso do Fabricante
• http://securityfocus.com/archive/1/486884/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0472 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0472 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39878 · Nota