CVE-2015-0905

bBlog - Cross-Site Request Forgery

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in bBlog allows remote attackers to hijack the authentication of arbitrary users.

References (4)

Core 4
Core References
Product x_refsource_misc
http://sourceforge.net/projects/bblog/
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032041
Vendor Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN71903938/index.html
Vendor Advisory third-party-advisory x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000047

Scores

EPSS 0.0099
EPSS Percentile 58.3%

Details

CWE
CWE-352
Status published
Products (1)
bblog_project/bblog
Published Apr 08, 2015
Tracked Since Feb 18, 2026