CVE-2018-10232

Cross-site request forgery (CSRF) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers to hijack the authentication of authenticated users for requests that can obtain sensitive information via unspecified vectors.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-07-11

Last modified

2024-08-05

Weaknesses

CWE-352

Affected products

• Topdesk (Topdesk)

References

• https://page.topdesk.com/cve-2018-10231-and-cve-2018-10232?hs_preview=slNSCcfI-5931819551