CVE-2013-4405
published 2013-12-23CVE-2013-4405: Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allow remote attackers to hijack…
PriorityP425medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
0.99%
58.8th percentile
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allow remote attackers to hijack the authentication of cumin users for unspecified requests.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_mrg | — | — |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
cumin: CSRF protection does not work
vendor_redhat·2013-12-17·CVSS 6.8
CVE-2013-4405 [MEDIUM] CWE-352 cumin: CSRF protection does not work
cumin: CSRF protection does not work
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allow remote attackers to hijack the authentication of cumin users for unspecified requests.
GHSA
GHSA-gpp7-2xpg-h4f8: Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface for cumin in Red Hat Enterprise MRG Grid 2
ghsa_unreviewed·2022-05-13
CVE-2013-4405 [MEDIUM] CWE-352 GHSA-gpp7-2xpg-h4f8: Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface for cumin in Red Hat Enterprise MRG Grid 2
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allow remote attackers to hijack the authentication of cumin users for unspecified requests.
No detection rules found.
No public exploits indexed.
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=998561http://rhn.redhat.com/errata/RHSA-2013-1851.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1852.htmlhttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=998561http://rhn.redhat.com/errata/RHSA-2013-1851.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1852.html
2013-12-23
Published