PT-2014-9129 · Egroupware · Egroupware
Publicado
2014-05-17
·
Atualizado
2014-05-17
Nenhuma
Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
Name of the Vulnerable Software and Affected Versions
eGroupWare versions prior to 1.8.007
Description
The issue allows logged-in users with administrative privileges to remotely execute arbitrary commands on the server. It is also vulnerable to a cross-site request forgery vulnerability that allows creating new administrative users.
Recommendations
For versions prior to 1.8.007, update to version 1.8.007 or later to resolve the issue. As a temporary workaround, consider restricting administrative privileges to minimize the risk of exploitation. Restrict access to sensitive areas of the application to prevent cross-site request forgery attacks.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Egroupware