CVE-2010-3883: CSRF

Q: What is the severity of CVE-2010-3883?

CVE-2010-3883 is classified as a high severity vulnerability due to its potential for allowing unauthorized permission modifications.

Q: How do I fix CVE-2010-3883?

To fix CVE-2010-3883, upgrade CMS Made Simple to version 1.7.2 or later which addresses this CSRF vulnerability.

Q: What systems are affected by CVE-2010-3883?

CVE-2010-3883 affects CMS Made Simple versions 1.7.1 and earlier.

Q: What type of attack is CVE-2010-3883 associated with?

CVE-2010-3883 is associated with Cross-Site Request Forgery (CSRF) attacks that allow unauthorized changes to user permissions.

Q: Can CVE-2010-3883 lead to complete system compromise?

While CVE-2010-3883 can allow an attacker to modify user permissions, it requires a predefined level of access, making complete system compromise dependent on existing user privileges.

Published Oct 8, 2010

Updated

Cross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make permission modifications.

Affected Software

74 affected components

CMSmadesimple CMS Made Simple<=1.7.1

CMSmadesimple CMS Made Simple=0.10

CMSmadesimple CMS Made Simple=0.10.3

CMSmadesimple CMS Made Simple=0.10.4

CMSmadesimple CMS Made Simple=0.11

CMSmadesimple CMS Made Simple=0.11-beta5

CMSmadesimple CMS Made Simple=0.11-beta6

CMSmadesimple CMS Made Simple=0.11.1

CMSmadesimple CMS Made Simple=0.11.2

CMSmadesimple CMS Made Simple=0.12

CMSmadesimple CMS Made Simple=0.12-beta1

CMSmadesimple CMS Made Simple=0.12-beta2

CMSmadesimple CMS Made Simple=0.12.1

CMSmadesimple CMS Made Simple=0.12.2

CMSmadesimple CMS Made Simple=0.13-beta1

CMSmadesimple CMS Made Simple=0.13-beta2

CMSmadesimple CMS Made Simple=0.13-beta3

CMSmadesimple CMS Made Simple=1.0

CMSmadesimple CMS Made Simple=1.0-beta1

CMSmadesimple CMS Made Simple=1.0-beta2

CMSmadesimple CMS Made Simple=1.0-beta3

CMSmadesimple CMS Made Simple=1.0-beta4

CMSmadesimple CMS Made Simple=1.0-beta5

CMSmadesimple CMS Made Simple=1.0-beta6

CMSmadesimple CMS Made Simple=1.0.1

CMSmadesimple CMS Made Simple=1.0.2

CMSmadesimple CMS Made Simple=1.0.3

CMSmadesimple CMS Made Simple=1.0.4

CMSmadesimple CMS Made Simple=1.0.5

CMSmadesimple CMS Made Simple=1.0.6

CMSmadesimple CMS Made Simple=1.0.7

CMSmadesimple CMS Made Simple=1.0.8

CMSmadesimple CMS Made Simple=1.1

CMSmadesimple CMS Made Simple=1.1-rc1

CMSmadesimple CMS Made Simple=1.1-rc2

CMSmadesimple CMS Made Simple=1.1-rc3

CMSmadesimple CMS Made Simple=1.1.1

CMSmadesimple CMS Made Simple=1.1.2

CMSmadesimple CMS Made Simple=1.1.3.1

CMSmadesimple CMS Made Simple=1.1.4.1

CMSmadesimple CMS Made Simple=1.2

CMSmadesimple CMS Made Simple=1.2-beta1

CMSmadesimple CMS Made Simple=1.2-beta2

CMSmadesimple CMS Made Simple=1.2-beta3

CMSmadesimple CMS Made Simple=1.2-rc1

CMSmadesimple CMS Made Simple=1.2.1

CMSmadesimple CMS Made Simple=1.2.2

CMSmadesimple CMS Made Simple=1.2.3

CMSmadesimple CMS Made Simple=1.2.4

CMSmadesimple CMS Made Simple=1.2.5

CMSmadesimple CMS Made Simple=1.3

CMSmadesimple CMS Made Simple=1.3-beta1

CMSmadesimple CMS Made Simple=1.3-beta2

CMSmadesimple CMS Made Simple=1.3.1

CMSmadesimple CMS Made Simple=1.4

CMSmadesimple CMS Made Simple=1.4-beta1

CMSmadesimple CMS Made Simple=1.4-beta2

CMSmadesimple CMS Made Simple=1.4.1

CMSmadesimple CMS Made Simple=1.5

CMSmadesimple CMS Made Simple=1.5-beta1

CMSmadesimple CMS Made Simple=1.5.1

CMSmadesimple CMS Made Simple=1.5.2

CMSmadesimple CMS Made Simple=1.5.3

CMSmadesimple CMS Made Simple=1.5.4

CMSmadesimple CMS Made Simple=1.6

CMSmadesimple CMS Made Simple=1.6.1

CMSmadesimple CMS Made Simple=1.6.2

CMSmadesimple CMS Made Simple=1.6.3

CMSmadesimple CMS Made Simple=1.6.4

CMSmadesimple CMS Made Simple=1.6.5

CMSmadesimple CMS Made Simple=1.6.6

CMSmadesimple CMS Made Simple=1.6.7

CMSmadesimple CMS Made Simple=1.6.8

CMSmadesimple CMS Made Simple=1.7

Event History

Oct 8, 2010

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3883?

CVE-2010-3883 is classified as a high severity vulnerability due to its potential for allowing unauthorized permission modifications.

How do I fix CVE-2010-3883?

To fix CVE-2010-3883, upgrade CMS Made Simple to version 1.7.2 or later which addresses this CSRF vulnerability.

What systems are affected by CVE-2010-3883?