CVE-2017-6328

EIP tracks 1 public exploit for CVE-2017-6328. PoCs published by Dhiraj Mishra.

AI-analyzed exploit summary This is a writeup describing a CSRF vulnerability in Symantec Messaging Gateway (CVE-2017-6328) that allows an attacker to log out users by sending a crafted URL. The proof of concept outlines a method to repeatedly log out active users, effectively causing a denial of service.

The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of cross site request forgery (also known as one-click attack and is abbreviated as CSRF or XSRF), which is a type of malicious exploit of a website where unauthorized commands are transmitted from a user that the web application trusts. A CSRF attack attempts to exploit the trust that a specific website has in a user's browser.