6.8

CVE-2011-3381

Cross-site request forgery (CSRF) vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phorum ≫ Phorum Version <= 5.2.15
Phorum ≫ Phorum Version 3.0.7
Phorum ≫ Phorum Version 3.1
Phorum ≫ Phorum Version 3.1.1
Phorum ≫ Phorum Version 3.1.1_pre
Phorum ≫ Phorum Version 3.1.1_rc2
Phorum ≫ Phorum Version 3.1.1a
Phorum ≫ Phorum Version 3.1.2
Phorum ≫ Phorum Version 3.2
Phorum ≫ Phorum Version 3.2.2
Phorum ≫ Phorum Version 3.2.3
Phorum ≫ Phorum Version 3.2.3a
Phorum ≫ Phorum Version 3.2.3b
Phorum ≫ Phorum Version 3.2.4
Phorum ≫ Phorum Version 3.2.5
Phorum ≫ Phorum Version 3.2.6
Phorum ≫ Phorum Version 3.2.7
Phorum ≫ Phorum Version 3.2.8
Phorum ≫ Phorum Version 3.3.1
Phorum ≫ Phorum Version 3.3.1a
Phorum ≫ Phorum Version 3.3.2
Phorum ≫ Phorum Version 3.3.2a
Phorum ≫ Phorum Version 3.3.2b3
Phorum ≫ Phorum Version 3.4
Phorum ≫ Phorum Version 3.4.1
Phorum ≫ Phorum Version 3.4.2
Phorum ≫ Phorum Version 3.4.3
Phorum ≫ Phorum Version 3.4.4
Phorum ≫ Phorum Version 3.4.5
Phorum ≫ Phorum Version 3.4.6
Phorum ≫ Phorum Version 3.4.7
Phorum ≫ Phorum Version 3.4.8
Phorum ≫ Phorum Version 3.4.8a
Phorum ≫ Phorum Version 4.3.7
Phorum ≫ Phorum Version 5.0.0_alpha
Phorum ≫ Phorum Version 5.0.1_alpha
Phorum ≫ Phorum Version 5.0.2_alpha
Phorum ≫ Phorum Version 5.0.3_beta
Phorum ≫ Phorum Version 5.0.4_beta
Phorum ≫ Phorum Version 5.0.4a_beta
Phorum ≫ Phorum Version 5.0.5_beta
Phorum ≫ Phorum Version 5.0.6_beta
Phorum ≫ Phorum Version 5.0.7_beta
Phorum ≫ Phorum Version 5.0.7a_beta
Phorum ≫ Phorum Version 5.0.8_rc
Phorum ≫ Phorum Version 5.0.9
Phorum ≫ Phorum Version 5.0.10
Phorum ≫ Phorum Version 5.0.11
Phorum ≫ Phorum Version 5.0.12
Phorum ≫ Phorum Version 5.0.13
Phorum ≫ Phorum Version 5.0.13a
Phorum ≫ Phorum Version 5.0.14
Phorum ≫ Phorum Version 5.0.14a
Phorum ≫ Phorum Version 5.0.15
Phorum ≫ Phorum Version 5.0.15a
Phorum ≫ Phorum Version 5.0.16
Phorum ≫ Phorum Version 5.0.17
Phorum ≫ Phorum Version 5.0.17a
Phorum ≫ Phorum Version 5.0.18
Phorum ≫ Phorum Version 5.0.19
Phorum ≫ Phorum Version 5.0.20
Phorum ≫ Phorum Version 5.1.13
Phorum ≫ Phorum Version 5.1.14
Phorum ≫ Phorum Version 5.1.17
Phorum ≫ Phorum Version 5.1.18
Phorum ≫ Phorum Version 5.1.20
Phorum ≫ Phorum Version 5.1.21
Phorum ≫ Phorum Version 5.1.25
Phorum ≫ Phorum Version 5.2
Phorum ≫ Phorum Version 5.2.1
Phorum ≫ Phorum Version 5.2.2 Update beta
Phorum ≫ Phorum Version 5.2.3 Update rc1
Phorum ≫ Phorum Version 5.2.4 Update rc2
Phorum ≫ Phorum Version 5.2.5
Phorum ≫ Phorum Version 5.2.8
Phorum ≫ Phorum Version 5.2.9
Phorum ≫ Phorum Version 5.2.10
Phorum ≫ Phorum Version 5.2.10 Update rc1
Phorum ≫ Phorum Version 5.2.11
Phorum ≫ Phorum Version 5.2.12
Phorum ≫ Phorum Version 5.2.12a
Phorum ≫ Phorum Version 5.2.13
Phorum ≫ Phorum Version 5.2.14
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.59% 0.433
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

http://jvn.jp/en/jp/JVN71435255/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000068
http://www.phorum.org/phorum5/read.php?64%2C147504