CVE-2017-14924: CSRF
First published: Sat Sep 30 2017(Updated: )
Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with an IMG element, related to tiki-assignuser.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tiki Tikiwiki Cms\/groupware | =12.0 | |
| Tiki Tikiwiki Cms\/groupware | =12.1 | |
| Tiki Tikiwiki Cms\/groupware | =12.2 | |
| Tiki Tikiwiki Cms\/groupware | =12.3 | |
| Tiki Tikiwiki Cms\/groupware | =12.4 | |
| Tiki Tikiwiki Cms\/groupware | =12.5 | |
| Tiki Tikiwiki Cms\/groupware | =12.6 | |
| Tiki Tikiwiki Cms\/groupware | =12.7 | |
| Tiki Tikiwiki Cms\/groupware | =12.8 | |
| Tiki Tikiwiki Cms\/groupware | =12.9 | |
| Tiki Tikiwiki Cms\/groupware | =12.10 | |
| Tiki Tikiwiki Cms\/groupware | =12.11 | |
| Tiki Tikiwiki Cms\/groupware | =15.0 | |
| Tiki Tikiwiki Cms\/groupware | =15.1 | |
| Tiki Tikiwiki Cms\/groupware | =15.2 | |
| Tiki Tikiwiki Cms\/groupware | =15.3 | |
| Tiki Tikiwiki Cms\/groupware | =15.4 | |
| Tiki Tikiwiki Cms\/groupware | =16.0 | |
| Tiki Tikiwiki Cms\/groupware | =16.1 | |
| Tiki Tikiwiki Cms\/groupware | =16.2 | |
| Tiki Tikiwiki Cms\/groupware | =17.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/type
- agent/weakness
- collector/nvd-index
- vendor/tiki
- canonical/tiki tikiwiki cms\/groupware
- version/tiki tikiwiki cms\/groupware/12.0
- version/tiki tikiwiki cms\/groupware/12.1
- version/tiki tikiwiki cms\/groupware/12.2
- version/tiki tikiwiki cms\/groupware/12.3
- version/tiki tikiwiki cms\/groupware/12.4
- version/tiki tikiwiki cms\/groupware/12.5
- version/tiki tikiwiki cms\/groupware/12.6
- version/tiki tikiwiki cms\/groupware/12.7
- version/tiki tikiwiki cms\/groupware/12.8
- version/tiki tikiwiki cms\/groupware/12.9
- version/tiki tikiwiki cms\/groupware/12.10
- version/tiki tikiwiki cms\/groupware/12.11
- version/tiki tikiwiki cms\/groupware/15.0
- version/tiki tikiwiki cms\/groupware/15.1
- version/tiki tikiwiki cms\/groupware/15.2
- version/tiki tikiwiki cms\/groupware/15.3
- version/tiki tikiwiki cms\/groupware/15.4
- version/tiki tikiwiki cms\/groupware/16.0
- version/tiki tikiwiki cms\/groupware/16.1
- version/tiki tikiwiki cms\/groupware/16.2
- version/tiki tikiwiki cms\/groupware/17.0