CVE-2016-1172

Cross-site request forgery (CSRF) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators.
Configurations

Configuration 1 (hide)

cpe:2.3:a:hiniarata:casebook_plugin:*:*:*:*:*:basercms:*:*

History

21 Nov 2024, 02:45

Type Values Removed Values Added
References () http://jvn.jp/en/jp/JVN13288761/index.html - Vendor Advisory () http://jvn.jp/en/jp/JVN13288761/index.html - Vendor Advisory
References () http://jvndb.jvn.jp/jvndb/JVNDB-2016-000041 - Vendor Advisory () http://jvndb.jvn.jp/jvndb/JVNDB-2016-000041 - Vendor Advisory
References () https://hiniarata.jp/news/archives/55 - Vendor Advisory () https://hiniarata.jp/news/archives/55 - Vendor Advisory

Information

Published : 2016-04-06 23:59

Updated : 2024-11-21 02:45


NVD link : CVE-2016-1172

Mitre link : CVE-2016-1172

CVE.ORG link : CVE-2016-1172


JSON object : View

Products Affected

hiniarata

  • casebook_plugin
CWE
CWE-352

Cross-Site Request Forgery (CSRF)