CVE-2008-5941: CSRF
Published Jan 22, 2009
·Updated
Cross-site request forgery (CSRF) vulnerability in MODx 0.9.6.1p2 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.
Affected Software
6 affected components
Modxcms Modxcms=0.9.2.1
Modxcms Modxcms=0.9.0
Modxcms Modxcms=0.9.6
Modxcms Modxcms<=0.9.6.1
Modxcms Modxcms=0.9.1
Modxcms Modxcms=0.9.5
Event History
Jan 22, 2009
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Data Sourced
via NVD·11:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5941?
CVE-2008-5941 is classified as a medium severity vulnerability due to its potential for unauthorized actions.
2
How do I fix CVE-2008-5941?
To fix CVE-2008-5941, upgrade to a version of MODx higher than 0.9.6.1.
3
What types of attacks does CVE-2008-5941 facilitate?
CVE-2008-5941 facilitates cross-site request forgery (CSRF) attacks, allowing unauthorized actions on behalf of users.
4
Which versions of MODx are affected by CVE-2008-5941?
CVE-2008-5941 affects MODx versions 0.9.6.1 and earlier.
5
Who is at risk from CVE-2008-5941?
Users of the affected MODx CMS versions are at risk from CVE-2008-5941 as attackers can exploit the vulnerability.