CVE-2017-12790: CSRF
Published May 9, 2019
·Updated
Metinfo 5.3.18 is affected by: Cross Site Request Forgery (CSRF). The impact is: Information Disclosure (remote). The component is: admin/index.php. The attack vector is: The administrator clicks on the malicious link in the login state.
Affected Software
1 affected component
Metinfo Metinfo=5.3.18
Event History
May 9, 2019
CVE Published
via MITRE·04:21 PM
Data Sourced
via MITRE·04:21 PM
Description
Frequently Asked Questions
1
What is CVE-2017-12790?
CVE-2017-12790 refers to a Cross Site Request Forgery (CSRF) vulnerability found in Metinfo 5.3.18.
2
What is the impact of CVE-2017-12790?
The impact of CVE-2017-12790 is Information Disclosure (remote).
3
What component of Metinfo 5.3.18 is affected by CVE-2017-12790?
The component affected by CVE-2017-12790 is admin/index.php.
4
What is the attack vector for CVE-2017-12790?
The attack vector for CVE-2017-12790 involves the administrator clicking on a malicious link in the login state.
5
How can I fix CVE-2017-12790?
To fix CVE-2017-12790, it is recommended to update Metinfo to a version that is not affected by this vulnerability.