Cross-Site Request Forgery Vulnerability in eXtplorer by eXtplorer
CVE-2012-3362

Currently unrated

Key Information:

Vendor

Extplorer

Status
Vendor
CVE Published:
12 July 2012

What is CVE-2012-3362?

A Cross-Site Request Forgery (CSRF) vulnerability exists in eXtplorer versions 2.1 RC3 and earlier, which could enable remote attackers to exploit the authentication of administrators. Specifically, this flaw could allow attackers to send unauthorized requests on behalf of an admin, leading to the potential addition of unauthorized administrator accounts through the 'adduser admin' action. This can severely compromise the integrity and security of the application, as it allows malicious users to gain elevated privileges without legitimate access.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.