CVE-2009-3248
MEDIUM 6.8EPSS 1.3%
Cross-site request forgery (CSRF) vulnerability in the RSS module in vtiger CRM 5.0.4 allows remote attackers to hijack the authentication of Admin users for requests that modify the news feed system via the rssurl parameter in a Save action to index.php.
- CVSS v2.0 NVD
- 6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P - EPSS
- 1.26% chance of exploitation in the next 30 days, 69th percentile
- Published
- 2009-09-18
- Updated
- 2024-08-07
Proof-of-concept exploits (1)
ExploitDB entries (1)
Security advisories
- http://secunia.com/advisories/36309
- http://www.vupen.com/english/advisories/2009/2319
- http://www.securityfocus.com/bid/36062