CVE-2017-15608

Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-09-26

Last modified

2024-08-05

Weaknesses

CWE-352

Affected products

• Proget (Inedo)

References

• https://inedo.com/blog/proget-50-beta5-released
• https://inedo.myjetbrains.com/youtrack/issue/PG-1118