未評価
A CSRF issue was discovered in DAViCal through 1.1.8. If an authenticated user visits an attacker-controlled webpage, the attacker can send arbitrary...
CVE-2019-18346
SecPulse初出
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2019-18346 davical 修正版: 1.1.9.2-1
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
A CSRF issue was discovered in DAViCal through 1.1.8. If an authenticated user visits an attacker-controlled webpage, the attacker can send arbitrary requests in the name of the user to the application. If the attacked user is an administrator, the attacker could for example add a new admin user.
参照URL
- advisory packetstormsecurity.com
- advisory seclists.org
- advisory seclists.org
- advisory seclists.org
- advisory gitlab.com
- advisory debian.org
- report hackdefense.com
- web lists.debian.org
- web seclists.org
- web davical.org