Beveiligingsadvies

CVE-2015-2912

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2015-12-31 02:00:00

Laatst bijgewerkt 2024-08-06 05:32:20

Toegewezen door certcc

CVSS-score geen score

Status PUBLISHED

Beschrijving

The JSONP endpoint in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict callback values, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks, and obtain sensitive information, via a crafted HTTP request.

← Alle CVE's bekijken Bekijk op cve.org ↗