CVE-2016-1170

Cross-site request forgery (CSRF) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators.

Score

CVSS 3.0 8.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2016-04-06

Last modified

2024-08-05

Weaknesses

CWE-352

Affected products

• Casebook Plugin (Hiniarata)

References

• http://jvn.jp/en/jp/JVN55801246/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000045
• https://hiniarata.jp/news/archives/55