CVE-2013-5708

2013-09-0610:00:00

mitre

www.cve.org

coursemill lms 6.8

csrf

vulnerability

remote attackers

cross-site request forgery

time values

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

45.6%

JSON

Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via vectors related to cookies, a different vulnerability than CVE-2013-3605.

References

www.kb.cert.org/vuls/id/960908