CVE-2019-5968

Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote attackers to hijack the authentication of administrators via...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote attackers to hijack the authentication of administrators via updating user's 'Basic Info'.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory jvn.jp
advisory weseek.co.jp