CVE-2013-6018

2013-10-2801:00:00

certcc

www.cve.org

cve-2013-6018

cross-site request forgery

csrf

tyler technologies

taxweb

authentication hijacking

change password

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

45.6%

JSON

Cross-site request forgery (CSRF) vulnerability in login.jsp in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password.

References

www.kb.cert.org/vuls/id/911678