Cross-Site Request Forgery Vulnerability in ZUUSE BEIMS ContractorWeb by ZUUSE
CVE-2018-5329

8.8HIGH

Key Information:

Vendor

Beims

Status
Contractorweb.net
Vendor
CVE Published:
15 January 2018

What is CVE-2018-5329?

The ZUUSE BEIMS ContractorWeb version 5.18.0.0 is susceptible to Cross-Site Request Forgery (CSRF) on authenticated pages, specifically those under /CWEBNET/. This vulnerability can be exploited by an attacker to execute unauthorized commands on behalf of the logged-in user. A successful CSRF attack can result in malicious actions such as creating new users, altering user email addresses, or other significant changes, especially if an administrative account is compromised. This presents a serious risk to the integrity and security of the entire web application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://becomepentester.blogspot.com/2018/01/ZUUSE-BEIMS-...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.