CVE-2012-6493

Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers to hijack the authentication of unspecified victims for requests that delete scan data and sites via a request to data/site/delete.

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

2.31% chance of exploitation in the next 30 days, 83rd percentile

Published

2014-02-04

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/23924

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/23924

Security advisories

• https://community.rapid7.com/docs/DOC-2155#release1

References

• CVE Record
• NVD entry