Security Advisory

CVE-2013-5748

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-05-12 14:00:00
Last updated 2024-08-06 17:22:30
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to hijack the authentication of users for requests that add projects via an add_project action.