CVE-2011-3381: CSRF
Published Sep 8, 2011
·Updated
Cross-site request forgery (CSRF) vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected Software
83 affected components
Phorum Phorum=5.2.10-rc1
Phorum Phorum=3.2.2
Phorum Phorum=5.0.15
Phorum Phorum=3.1.1_pre
Phorum Phorum=5.2.5
Phorum Phorum=5.0.1_alpha
Phorum Phorum=5.2.9
Phorum Phorum=5.2.12
Phorum Phorum=3.4.6
Phorum Phorum=5.2.2-beta
Phorum Phorum=3.2.3
Phorum Phorum=5.0.13a
Phorum Phorum=5.2.14
Phorum Phorum=5.0.15a
Phorum Phorum=3.2.7
Phorum Phorum=3.4.3
Phorum Phorum=5.0.2_alpha
Phorum Phorum=5.0.5_beta
Phorum Phorum=5.0.19
Phorum Phorum=5.1.13
Phorum Phorum=3.1.1
Phorum Phorum=3.2.8
Phorum Phorum=3.3.1a
Phorum Phorum=5.0.7a_beta
Phorum Phorum=3.4.4
Phorum Phorum=5.0.17
Phorum Phorum=5.0.17a
Phorum Phorum=3.3.1
Phorum Phorum=3.4
Phorum Phorum<=5.2.15
Phorum Phorum=3.3.2
Phorum Phorum=3.1.1_rc2
Phorum Phorum=5.1.25
Phorum Phorum=5.0.18
Phorum Phorum=5.0.4a_beta
Phorum Phorum=4.3.7
Phorum Phorum=3.0.7
Phorum Phorum=5.1.18
Phorum Phorum=5.2.4-rc2
Phorum Phorum=5.2.12a
Phorum Phorum=3.1.1a
Phorum Phorum=3.4.5
Phorum Phorum=5.2.3-rc1
Phorum Phorum=5.0.12
Phorum Phorum=5.0.20
Phorum Phorum=5.1.20
Phorum Phorum=3.4.8a
Phorum Phorum=3.2.5
Phorum Phorum=3.2.3a
Phorum Phorum=5.2
Phorum Phorum=5.2.10
Phorum Phorum=5.1.21
Phorum Phorum=5.0.0_alpha
Phorum Phorum=3.2
Phorum Phorum=5.2.13
Phorum Phorum=5.0.16
Phorum Phorum=5.0.10
Phorum Phorum=3.1.2
Phorum Phorum=5.0.11
Phorum Phorum=5.0.14a
Phorum Phorum=5.0.9
Phorum Phorum=3.1
Phorum Phorum=5.0.14
Phorum Phorum=5.0.7_beta
Phorum Phorum=5.1.14
Phorum Phorum=3.4.2
Phorum Phorum=5.0.6_beta
Phorum Phorum=5.1.17
Phorum Phorum=3.4.1
Phorum Phorum=3.4.7
Phorum Phorum=5.0.3_beta
Phorum Phorum=5.2.8
Phorum Phorum=3.4.8
Phorum Phorum=3.2.4
Phorum Phorum=5.0.4_beta
Phorum Phorum=5.0.13
Phorum Phorum=5.2.1
Phorum Phorum=5.0.8_rc
Phorum Phorum=5.2.11
Phorum Phorum=3.2.3b
Phorum Phorum=3.3.2b3
Phorum Phorum=3.3.2a
Phorum Phorum=3.2.6
Remediation
Patch Available
Event History
Sep 8, 2011
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3381?
CVE-2011-3381 is classified as a medium severity vulnerability due to its ability to allow unauthorized actions via CSRF.
2
How do I fix CVE-2011-3381?
To fix CVE-2011-3381, update Phorum to version 5.2.16 or later, where the vulnerability has been addressed.
3
What systems are affected by CVE-2011-3381?
CVE-2011-3381 affects multiple versions of Phorum, including 5.2.10-rc1, 5.2.0, and several earlier versions of Phorum.
4
What type of vulnerability is CVE-2011-3381?
CVE-2011-3381 is a Cross-site request forgery (CSRF) vulnerability.
5
Can CVE-2011-3381 be exploited remotely?
Yes, CVE-2011-3381 can be exploited remotely by attackers to hijack user authentication.