Cross-site request forgery (CSRF) vulnerability in esop/toolkit/profile/regData.do in Bravo Tejari Procurement Portal allows remote authenticated users to hijack the authentication of application users for requests that modify their personal data by leveraging lack of anti-CSRF tokens.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-02-18T06:00:00
Updated: 2024-08-05T06:24:11.453Z
Reserved: 2018-02-17T00:00:00
Link: CVE-2018-7216
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-02-18T06:29:00.277
Modified: 2024-11-21T04:11:48.670
Link: CVE-2018-7216
Redhat
No data.