CVE-2015-0905

Cross-site request forgery (CSRF) vulnerability in bBlog allows remote attackers to hijack the authentication of arbitrary users.

Score

CVSS 2.0 6.8 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2015-04-08

Last modified

2024-08-06

Weaknesses

CWE-352

Affected products

• Bblog (Bblog Project)

References

• http://jvn.jp/en/jp/JVN71903938/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000047
• http://sourceforge.net/projects/bblog/
• http://www.securitytracker.com/id/1032041