CVE-2017-10678
First published: Thu Jun 29 2017(Updated: )
Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to delete permalinks via a crafted request.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Piwigo Piwigo | <=2.9.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-10678?
CVE-2017-10678 has a high severity rating of 8.8.
What kind of vulnerability is CVE-2017-10678?
CVE-2017-10678 is a cross-site request forgery (CSRF) vulnerability.
How do I fix CVE-2017-10678?
To fix CVE-2017-10678, update Piwigo to a version later than 2.9.1.
What risks does CVE-2017-10678 pose to users?
CVE-2017-10678 allows remote attackers to hijack user authentication and perform actions such as deleting permalinks.
Which versions of Piwigo are affected by CVE-2017-10678?
CVE-2017-10678 affects Piwigo versions up to and including 2.9.1.
- collector/nvd-index
- vendor/piwigo
- product/piwigo
- canonical/piwigo piwigo