CVE-2016-15009

ALTO 8.8CVE-2016-15009 · Published 05/01/2023 · updated 17/06/2026

In breve

CVE-2016-15009 è una vulnerabilità ALTO (CVSS 8.8) che riguarda bug-tracker (openacs).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.37%, superiore al 31.5% delle vulnerabilità.
Correzione: aggiornare a 2016-05-25 o successiva.

Package	Affected versions	Patched versions
bug-tracker openacs	`< 2016-05-25`	`2016-05-25`

Description

A vulnerability classified as problematic has been found in OpenACS bug-tracker. Affected is an unknown function of the file lib/nav-bar.adp of the component Search. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The name of the patch is aee43e5714cd8b697355ec3bf83eefee176d3fc3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217440.

References

openacs/bug-tracker commit aee43e5 · Patch
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free