CVE-2015-2861

EUVD-2015-2949
Cross-site request forgery (CSRF) vulnerability in Vesta Control Panel before 0.9.8-14 allows remote attackers to hijack the authentication of arbitrary users.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 39%
Affected Products (NVD)
VendorProductVersion
vestacpvesta_control_panel
𝑥
≤ 0.9.8-12
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://vestacp.com/roadmap/#history
http://www.kb.cert.org/vuls/id/842780
http://www.securityfocus.com/bid/75215
https://github.com/serghey-rodin/vesta/commit/527e4a9a62204be9b34c1338fadfe959b0fd3974
http://vestacp.com/roadmap/#history
http://www.kb.cert.org/vuls/id/842780
http://www.securityfocus.com/bid/75215
https://github.com/serghey-rodin/vesta/commit/527e4a9a62204be9b34c1338fadfe959b0fd3974