CVE-2016-1172

HIGH

hiniarata casebook_plugin < 0.9.2 - Cross-Site Request Forgery

Title source: llm

Description

Cross-site request forgery (CSRF) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators.

References (3)

Core 3

Core References

Vendor Advisory third-party-advisory x_refsource_jvndb

http://jvndb.jvn.jp/jvndb/JVNDB-2016-000041

Vendor Advisory third-party-advisory x_refsource_jvn

http://jvn.jp/en/jp/JVN13288761/index.html

Vendor Advisory x_refsource_confirm

https://hiniarata.jp/news/archives/55

Scores

CVSS v3 8.8

EPSS 0.0063

EPSS Percentile 45.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-352

Status published

Products (1)

hiniarata/casebook_plugin < 0.9.2

Published Apr 06, 2016

Tracked Since Feb 18, 2026