Cross-Site Request Forgery in RISE Ultimate Project Manager by RISE
CVE-2019-18884
8.8HIGH
What is CVE-2019-18884?
The RISE Ultimate Project Manager version 2.3 contains a Cross-Site Request Forgery vulnerability in the index.php/team_members/add_team_member endpoint. This flaw allows attackers to exploit the system by adding unauthorized users without proper authentication, potentially compromising the integrity of the user management process. It highlights the importance of implementing security measures, such as CSRF tokens, to safeguard against unauthorized actions.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved