PT-2023-10328 · Unknown · Openacs Bug-Tracker

CVE-2016-15009 · Publicado 2023-01-05 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenACS bug-tracker (affected versions not specified)

Description A problematic vulnerability has been found in OpenACS bug-tracker, affecting an unknown function of the file lib/nav-bar.adp of the component Search. The manipulation leads to cross-site request forgery, and it is possible to launch the attack remotely.

Recommendations Apply a patch to fix this issue, specifically the patch with the name aee43e5714cd8b697355ec3bf83eefee176d3fc3.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2016-15009

Produtos afetados

Openacs Bug-Tracker

Referências · 7

• https://t.me/cvenotify/41284 · Publicação no Telegram
• https://github.com/openacs/bug-tracker/commit/aee43e5714cd8b697355ec3bf83eefee176d3fc3 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2016-15009 · Nota de Segurança
• https://vuldb.com/?id.217440 · Nota
• https://vuldb.com/?ctiid.217440 · Nota
• https://osv.dev/vulnerability/CVE-2016-15009 · Aviso do Fabricante
• https://t.me/cvenotify/41821 · Publicação no Telegram