Cross-site request forgery (CSRF) vulnerability in admin/addScript.py in Pyplate 0.08 allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the title parameter.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2014-08-07T10:00:00
Updated: 2024-08-06T10:57:17.744Z
Reserved: 2014-05-23T00:00:00
Link: CVE-2014-3854
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2014-08-07T11:13:35.890
Modified: 2014-08-07T16:24:02.273
Link: CVE-2014-3854
Redhat
No data.