Lucene search
Veracode Vulnerability DatabaseVERACODE:3788HistoryMar 27, 2017 - 6:34 a.m.
Cross-site Request Forgery (CSRF)
2017-03-2706:34:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.147
Percentile
95.8%
console-common is susceptible to cross-site request forgery (CSRF) attacks. The vulnerability exists because of a flaw in Web Container sub component.
References
blog.kotowicz.net/2011/04/how-to-upload-arbitrary-file-contents.html
www.mandriva.com/security/advisories?name=MDVSA-2013:150
www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html
www.securitytracker.com/id?1026941
github.com/payara/Payara/commit/3dbe9ab24b5bda05aaa9436cc98287b6e782c682
www.exploit-db.com/exploits/18766/
Related
nvd
nvd
CVE-2012-0550
2012-05-03 18:55:01
cve
cve
CVE-2012-0550
2012-05-03 18:55:01
cvelist
cvelist
CVE-2012-0550
2012-05-03 18:17:00
prion
prion
Design/Logic Flaw
2012-05-03 18:55:00
debiancve
debiancve
CVE-2012-0550
2012-05-03 18:55:00
checkpoint_advisories
checkpoint_advisories
nessus
nessus
openvas
openvas
Oracle GlassFish Server Multiple XSS and CSRF Vulnerabilities
2012-05-07 00:00:00
Oracle GlassFish Server Multiple XSS and CSRF Vulnerabilities
2012-05-07 00:00:00
securityvulns
securityvulns
oracle
oracle
Oracle Critical Patch Update - April 2012
2012-07-19 00:00:00