CVE-2017-10961

EUVD-2017-2599
REDCap before 7.5.1 has CSRF in the deletion feature of the File Repository and File Upload components.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 32%
Affected Products (NVD)
VendorProductVersion
vanderbiltredcap
𝑥
≤ 7.5.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://community.projectredcap.org/articles/13/changelog-standard-release.html
https://gist.github.com/jordanpotti/fef4f1ada404d5ba7f88ab42e93cdaae
https://community.projectredcap.org/articles/13/changelog-standard-release.html
https://gist.github.com/jordanpotti/fef4f1ada404d5ba7f88ab42e93cdaae