VulnerabilityModified
CVE-2009-3022
Cross-site request forgery (CSRF) vulnerability in bingo!CMS 1.2 and earlier allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content via unspecified vectors.
MEDIUM 6.5EPSS 0.99%
Does this matter?
Lower severity and a low EPSS score (0.99%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site request forgery (CSRF) vulnerability in bingo!CMS 1.2 and earlier allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content via unspecified vectors.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- EPSS
- 0.99% probability · 61th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352
- Affected
- itd-inc/bingo\!cms
- Source
- cve@mitre.org
References
- http://jvn.jp/en/jp/JVN68640473/index.htmlThird Party Advisory
- http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000058.htmlThird Party Advisory, VDB Entry
- http://osvdb.org/57425Broken Link
- http://secunia.com/advisories/36458Broken Link, Vendor Advisory
- http://www.bingo-cms.jp/security/jvn68640473.htmlBroken Link, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52838Third Party Advisory, VDB Entry
- http://jvn.jp/en/jp/JVN68640473/index.htmlThird Party Advisory
- http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000058.htmlThird Party Advisory, VDB Entry
- http://osvdb.org/57425Broken Link
- http://secunia.com/advisories/36458Broken Link, Vendor Advisory
- http://www.bingo-cms.jp/security/jvn68640473.htmlBroken Link, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52838Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.