PT-2023-10328 · Unknown · Openacs Bug-Tracker

Published 2023-01-05 · Updated 2024-05-17 · CVE-2016-15009

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenACS bug-tracker (affected versions not specified)

Description A problematic vulnerability has been found in OpenACS bug-tracker, affecting an unknown function of the file lib/nav-bar.adp of the component Search. The manipulation leads to cross-site request forgery, and it is possible to launch the attack remotely.

Recommendations Apply a patch to fix this issue, specifically the patch with the name aee43e5714cd8b697355ec3bf83eefee176d3fc3.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2016-15009

Affected Products

Openacs Bug-Tracker

References · 7

• https://github.com/openacs/bug-tracker/commit/aee43e5714cd8b697355ec3bf83eefee176d3fc3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2016-15009 · Security Note
• https://osv.dev/vulnerability/CVE-2016-15009 · Vendor Advisory
• https://t.me/cvenotify/41284 · Telegram Post
• https://vuldb.com/?id.217440 · Note
• https://vuldb.com/?ctiid.217440 · Note
• https://t.me/cvenotify/41821 · Telegram Post