CVE-2017-12789: CSRF
Published May 10, 2019
·Updated
Metinfo 5.3.18 is affected by: Cross Site Request Forgery (CSRF). The impact is: Information Disclosure (remote). The component is: admin/interface/online/delete.php. The attack vector is: The administrator clicks on the malicious link in the login state.
Affected Software
1 affected component
Metinfo Metinfo=5.3.18
Event History
May 10, 2019
CVE Published
via MITRE·02:02 PM
Data Sourced
via MITRE·02:02 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-12789?
The severity of CVE-2017-12789 is high.
2
What is the impact of CVE-2017-12789?
The impact of CVE-2017-12789 is information disclosure (remote).
3
Which component of Metinfo 5.3.18 is affected by CVE-2017-12789?
The admin/interface/online/delete.php component of Metinfo 5.3.18 is affected by CVE-2017-12789.
4
What is the attack vector of CVE-2017-12789?
The attack vector of CVE-2017-12789 is when the administrator clicks on a malicious link in the login state.
5
How can I fix CVE-2017-12789?
To fix CVE-2017-12789, update Metinfo to a version that is not affected by this vulnerability.