CVE-2017-17894: CSRF
Published Dec 24, 2017
·Updated
Readymade Job Site Script has CSRF via the /job URI.
Affected Software
1 affected component
Basic Job Site Script Project Basic Job Site Script
Event History
Dec 24, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-17894?
CVE-2017-17894 has a moderate severity due to its potential for CSRF attacks affecting user data.
2
How do I fix CVE-2017-17894?
To fix CVE-2017-17894, implement anti-CSRF tokens in forms related to the /job URI.
3
What is the impact of CVE-2017-17894?
CVE-2017-17894 allows an attacker to execute actions on behalf of a user without their consent.
4
Which versions of Basic Job Site Script are affected by CVE-2017-17894?
CVE-2017-17894 affects all versions of Basic Job Site Script that are prior to the implementation of CSRF protections.
5
What kind of attack can be performed using CVE-2017-17894?
CVE-2017-17894 allows for CSRF attacks that could lead to unauthorized job postings or modifications.