Unrated
A CSRF issue was discovered in DAViCal through 1.1.8. If an authenticated user visits an attacker-controlled webpage, the attacker can send arbitrary...
CVE-2019-18346
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2019-18346 davical Fixed in: 1.1.9.2-1
Original description The description as published by the source.
A CSRF issue was discovered in DAViCal through 1.1.8. If an authenticated user visits an attacker-controlled webpage, the attacker can send arbitrary requests in the name of the user to the application. If the attacked user is an administrator, the attacker could for example add a new admin user.
References
- advisory packetstormsecurity.com
- advisory seclists.org
- advisory seclists.org
- advisory seclists.org
- advisory gitlab.com
- advisory debian.org
- report hackdefense.com
- web lists.debian.org
- web seclists.org
- web davical.org