Fat Free CRM before 0.13.6 allows remote attackers to conduct cross-site request forgery (CSRF) attacks via a request without the authenticity_token, as demonstrated by a crafted HTML page that creates a new administrator account.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2015-02-19T15:00:00
Updated: 2024-08-06T04:47:17.407Z
Reserved: 2015-02-11T00:00:00
Link: CVE-2015-1585
Vulnrichment
No data.
NVD
Status : Modified
Published: 2015-02-19T15:59:14.673
Modified: 2018-10-09T19:55:58.153
Link: CVE-2015-1585
Redhat
No data.