Cross-Site Request Forgery Vulnerability in Fat Free CRM by Fat Free CRM
CVE-2015-1585

Currently unrated

Key Information:

Vendor

Fatfreecrm

Status
Fat Free Crm
Vendor
CVE Published:
19 February 2015

What is CVE-2015-1585?

Fat Free CRM versions before 0.13.6 are susceptible to cross-site request forgery (CSRF) attacks. This vulnerability allows remote attackers to exploit the lack of authenticity tokens in requests, potentially enabling them to create new administrator accounts through crafted HTML pages without user consent. Implementing proper CSRF protection measures is crucial to safeguard applications against such threats.

References

https://github.com/fatfreecrm/fat_free_crm/wiki/CSRF-Vuln...
x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/534709/100/0/threaded
mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/100925
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.