CVE-2016-0348

CWE-352 — Cross-Site Request Forgery (CSRF)3 documents3 sources

Severity

8.0HIGH

EPSS

0.1%

top 73.87%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Tririga Application Platform

Timeline

PublishedFeb 21

Latest updateMay 14

Description

Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3, 3.3.1, 3.3.2, and 3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111813.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HExploitability: 2.1 | Impact: 5.9

Affected Packages1 packages

▶NVDibm/tririga_application_platform4 versions+3

🔴Vulnerability Details

GHSA

GHSA-pw2x-4xx7-2ghx: Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3↗2022-05-14

▶

CVEList

CVE-2016-0348: Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3↗2018-02-21

▶