Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attackers to hijack the authentication of student users for requests that change configuration and enrollments via unspecified input to (1) update_module.jsp, (2) enroll_course.pl, and (3) unenroll.jsp.
References (4)
Core 4
Core References
URL Repurposed x_refsource_misc
http://ceaseless.ws/bb-csrf/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/43986
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/31177
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1020559
Scores
EPSS
0.0053
EPSS Percentile
41.0%
Details
CWE
CWE-352
Status
published
Products (1)
blackboard/blackboard_academic_suite
8.0.260.7
Published
Jul 31, 2008
Tracked Since
Feb 18, 2026