6.8
CVE-2010-3694
- EPSS 0.62%
- Veröffentlicht 09.11.2010 21:00:04
- Zuletzt bearbeitet 16.06.2026 23:23:21
- Erkennungen
LoginCross-site request forgery (CSRF) vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Horde ≫ Horde Application Framework Version <= 3.3.8
Horde ≫ Horde Application Framework Version 1.0.3
Horde ≫ Horde Application Framework Version 1.1.1
Horde ≫ Horde Application Framework Version 1.3.0
Horde ≫ Horde Application Framework Version 1.3.1
Horde ≫ Horde Application Framework Version 1.3.2
Horde ≫ Horde Application Framework Version 1.3.3
Horde ≫ Horde Application Framework Version 1.3.4
Horde ≫ Horde Application Framework Version 1.3.5
Horde ≫ Horde Application Framework Version 2.0
Horde ≫ Horde Application Framework Version 2.0 Update rc1
Horde ≫ Horde Application Framework Version 2.0 Update rc3
Horde ≫ Horde Application Framework Version 2.0 Update rc4
Horde ≫ Horde Application Framework Version 2.1
Horde ≫ Horde Application Framework Version 2.2
Horde ≫ Horde Application Framework Version 2.2.1
Horde ≫ Horde Application Framework Version 2.2.2
Horde ≫ Horde Application Framework Version 2.2.3
Horde ≫ Horde Application Framework Version 2.2.4
Horde ≫ Horde Application Framework Version 2.2.5
Horde ≫ Horde Application Framework Version 2.2.6
Horde ≫ Horde Application Framework Version 2.2.6 Update rc1
Horde ≫ Horde Application Framework Version 2.2.7
Horde ≫ Horde Application Framework Version 2.2.8
Horde ≫ Horde Application Framework Version 2.2.9
Horde ≫ Horde Application Framework Version 3.0
Horde ≫ Horde Application Framework Version 3.0 Update alpha
Horde ≫ Horde Application Framework Version 3.0 Update beta
Horde ≫ Horde Application Framework Version 3.0 Update rc1
Horde ≫ Horde Application Framework Version 3.0 Update rc2
Horde ≫ Horde Application Framework Version 3.0 Update rc3
Horde ≫ Horde Application Framework Version 3.0.1
Horde ≫ Horde Application Framework Version 3.0.2
Horde ≫ Horde Application Framework Version 3.0.3
Horde ≫ Horde Application Framework Version 3.0.3 Update rc1
Horde ≫ Horde Application Framework Version 3.0.4
Horde ≫ Horde Application Framework Version 3.0.4 Update rc1
Horde ≫ Horde Application Framework Version 3.0.4 Update rc2
Horde ≫ Horde Application Framework Version 3.0.5
Horde ≫ Horde Application Framework Version 3.0.5 Update rc1
Horde ≫ Horde Application Framework Version 3.0.5 Update rc2
Horde ≫ Horde Application Framework Version 3.0.6
Horde ≫ Horde Application Framework Version 3.0.6 Update rc1
Horde ≫ Horde Application Framework Version 3.0.7
Horde ≫ Horde Application Framework Version 3.0.8
Horde ≫ Horde Application Framework Version 3.0.9
Horde ≫ Horde Application Framework Version 3.0.10
Horde ≫ Horde Application Framework Version 3.0.11
Horde ≫ Horde Application Framework Version 3.0.12
Horde ≫ Horde Application Framework Version 3.1
Horde ≫ Horde Application Framework Version 3.1 Update rc1
Horde ≫ Horde Application Framework Version 3.1 Update rc2
Horde ≫ Horde Application Framework Version 3.1 Update rc3
Horde ≫ Horde Application Framework Version 3.1.1
Horde ≫ Horde Application Framework Version 3.1.2
Horde ≫ Horde Application Framework Version 3.1.3
Horde ≫ Horde Application Framework Version 3.1.4
Horde ≫ Horde Application Framework Version 3.1.4 Update rc1
Horde ≫ Horde Application Framework Version 3.1.5
Horde ≫ Horde Application Framework Version 3.1.6
Horde ≫ Horde Application Framework Version 3.1.7
Horde ≫ Horde Application Framework Version 3.1.8
Horde ≫ Horde Application Framework Version 3.1.9
Horde ≫ Horde Application Framework Version 3.2
Horde ≫ Horde Application Framework Version 3.2 Update alpha
Horde ≫ Horde Application Framework Version 3.2 Update rc1
Horde ≫ Horde Application Framework Version 3.2 Update rc2
Horde ≫ Horde Application Framework Version 3.2 Update rc3
Horde ≫ Horde Application Framework Version 3.2 Update rc4
Horde ≫ Horde Application Framework Version 3.2.1
Horde ≫ Horde Application Framework Version 3.2.2
Horde ≫ Horde Application Framework Version 3.2.3
Horde ≫ Horde Application Framework Version 3.2.4
Horde ≫ Horde Application Framework Version 3.2.5
Horde ≫ Horde Application Framework Version 3.3
Horde ≫ Horde Application Framework Version 3.3 Update rc1
Horde ≫ Horde Application Framework Version 3.3.1
Horde ≫ Horde Application Framework Version 3.3.2
Horde ≫ Horde Application Framework Version 3.3.3
Horde ≫ Horde Application Framework Version 3.3.4
Horde ≫ Horde Application Framework Version 3.3.4 Update rc1
Horde ≫ Horde Application Framework Version 3.3.5
Horde ≫ Horde Application Framework Version 3.3.6
Horde ≫ Horde Application Framework Version 3.3.7
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.62% | 0.45 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
CWE-352 Cross-Site Request Forgery (CSRF)
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050408.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050423.html
http://lists.horde.org/archives/announce/2010/000557.html
http://secunia.com/advisories/42140
https://bugzilla.redhat.com/show_bug.cgi?id=630687