CVE-2016-15009

ÉLEVÉE 8.8CVE-2016-15009 · Published 05/01/2023 · updated 17/06/2026

En bref

CVE-2016-15009 est une vulnérabilité ÉLEVÉE (CVSS 8.8) touchant bug-tracker (openacs).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.37%, plus élevée que 31.5% des vulnérabilités.
Correctif : mettre à jour vers 2016-05-25 ou plus récent.

Package	Affected versions	Patched versions
bug-tracker openacs	`< 2016-05-25`	`2016-05-25`

Description

A vulnerability classified as problematic has been found in OpenACS bug-tracker. Affected is an unknown function of the file lib/nav-bar.adp of the component Search. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The name of the patch is aee43e5714cd8b697355ec3bf83eefee176d3fc3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217440.

References

openacs/bug-tracker commit aee43e5 · Patch
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free