PT-2013-3498 · Studio 42 · Elfinder

Publicado 2013-06-24 · Atualizado 2017-08-29 · CVE-2013-1972

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions elFinder file manager module versions 6.x-0.x before 6.x-0.8 elFinder file manager module versions 7.x-0.x before 7.x-0.8

Description A cross-site request forgery (CSRF) issue exists, allowing remote attackers to hijack the authentication of victims and perform unauthorized file operations, such as creating, modifying, or deleting files.

Recommendations For elFinder file manager module versions 6.x-0.x before 6.x-0.8, update to version 6.x-0.8 or later. For elFinder file manager module versions 7.x-0.x before 7.x-0.8, update to version 7.x-0.8 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-1972

Produtos afetados

Elfinder

Referências · 7

• https://drupal.org/node/1972084 · Nota
• http://osvdb.org/92533 · Nota
• https://drupal.org/node/1972082 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/fulldisclosure/2013-04/0237.html · Nota
• https://drupal.org/node/1972942 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-1972 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83651 · Nota