CVE-2017-12970: CSRF
Published Aug 23, 2017
·Updated
Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authentication of authenticated users for requests that (1) add or (2) delete user accounts via a request to phpsftpd/users.php.
Affected Software
1 affected component
Apache2Triad Apache2Triad=1.5.4
Event History
Aug 23, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-12970?
The severity of CVE-2017-12970 is considered medium due to its potential to hijack user authentication.
2
How do I fix CVE-2017-12970?
To fix CVE-2017-12970, implement CSRF tokens in request handling to validate user actions.
3
What systems are affected by CVE-2017-12970?
CVE-2017-12970 affects Apache2Triad version 1.5.4.
4
What type of vulnerability is CVE-2017-12970?
CVE-2017-12970 is a Cross-Site Request Forgery (CSRF) vulnerability.
5
What actions can be exploited in CVE-2017-12970?
CVE-2017-12970 allows attackers to exploit authenticated user sessions to add or delete user accounts.