CVE-2014-125057

KRITISCH 9.8CVE-2014-125057 · Published 07/01/2023 · updated 17/06/2026

Kurz gesagt

CVE-2014-125057 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in robitailletheknot (robitailletheknot project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.87%, höher als bei 59.2% aller Schwachstellen.
Abhilfe: auf 2014-11-10 oder neuer aktualisieren.

Package	Affected versions	Patched versions
robitailletheknot robitailletheknot_project	`< 2014-11-10`	`2014-11-10`

Description

A vulnerability was found in mrobit robitailletheknot. It has been classified as problematic. This affects an unknown part of the file app/filters.php of the component CSRF Token Handler. The manipulation of the argument _token leads to incorrect comparison. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The patch is named 6b2813696ccb88d0576dfb305122ee880eb36197. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217599.

References

mrobit/robitailletheknot commit 6b28136 · Patch
vuldb.com · Permissions Required
vuldb.com · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free