Non évaluée
A CSRF issue was discovered in DAViCal through 1.1.8. If an authenticated user visits an attacker-controlled webpage, the attacker can send arbitrary...
CVE-2019-18346
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2019-18346 davical Corrigé dans: 1.1.9.2-1
Description d'origine La description telle que publiée par la source (souvent en anglais).
A CSRF issue was discovered in DAViCal through 1.1.8. If an authenticated user visits an attacker-controlled webpage, the attacker can send arbitrary requests in the name of the user to the application. If the attacked user is an administrator, the attacker could for example add a new admin user.
Références
- advisory packetstormsecurity.com
- advisory seclists.org
- advisory seclists.org
- advisory seclists.org
- advisory gitlab.com
- advisory debian.org
- report hackdefense.com
- web lists.debian.org
- web seclists.org
- web davical.org