Cross-Site Request Forgery Vulnerability in Webgalamb by Webgalamb
CVE-2018-19511

6.5MEDIUM

Key Information:

Vendor

Ens

Status
Webgalamb
Vendor
CVE Published:
21 March 2019

What is CVE-2018-19511?

The security flaw in Webgalamb 7.0 arises from inadequate protection against Cross-Site Request Forgery (CSRF) attacks in the wg7.php file. This vulnerability allows unauthorized users to alter the administrator password simply by sending a manipulated request, compromising the integrity and security of the application. Developers and users of Webgalamb should implement CSRF tokens to safeguard against this type of vulnerability and ensure that user actions are legitimate.

References

http://packetstormsecurity.com/files/151017/Webgalamb-Inf...
x_refsource_MISC
http://seclists.org/fulldisclosure/2019/Jan/15
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.