cbcvebase.
CVE-2009-4079
published 2009-11-25

CVE-2009-4079: Cross-site request forgery (CSRF) vulnerability in Redmine 0.8.5 and earlier allows remote attackers to hijack the authentication of users for requests that…

PriorityP424medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
0.72%
49.7th percentile
Cross-site request forgery (CSRF) vulnerability in Redmine 0.8.5 and earlier allows remote attackers to hijack the authentication of users for requests that delete a ticket via unspecified vectors.

Affected

28 ranges· showing 25
VendorProductVersion rangeFixed in
debianredmine< redmine 0.9.0~svn2902-1 (bookworm)redmine 0.9.0~svn2902-1 (bookworm)
redmineredmine<= 0.8.5—
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——
redmineredmine——

CVSS provenance

nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv6.8MEDIUM
vendor_debian6.8MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.