Security Advisory

CVE-2013-4555

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-11-15 18:16:00
Last updated 2024-08-06 16:45:14
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in ecrire/action/logout.php in SPIP before 2.1.24 allows remote attackers to hijack the authentication of arbitrary users for requests that logout the user via unspecified vectors.