CVE-2008-3716 Cross-site request forgery (CSRF) vulnerability in Harmoni before 1.6.0 allows remote attackers to make administrative modifications via a (1) save or (2) delete action to an unspecified component.
MediumCVSS 6.0
EPSS 0.56%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in Harmoni before 1.6.0 allows remote attackers to make administrative modifications via a (1) save or (2) delete action to an unspecified component.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| harmoni | <= 1.4.7 | No fix listed |
| harmoni | = 0.0.2 | No fix listed |
| harmoni | = 0.0.3 | No fix listed |
| harmoni | = 0.0.4 | No fix listed |
| harmoni | = 0.0.5 | No fix listed |
| harmoni | = 0.1.0 | No fix listed |
| harmoni | = 0.2.0 | No fix listed |
| harmoni | = 0.3.0 | No fix listed |
| harmoni | = 0.3.1 | No fix listed |
| harmoni | = 0.3.2 | No fix listed |
| harmoni | = 0.5.1 | No fix listed |
| harmoni | = 0.6.0 | No fix listed |
| harmoni | = 0.6.2 | No fix listed |
| harmoni | = 0.7.0 | No fix listed |
| harmoni | = 0.7.1 | No fix listed |
| harmoni | = 0.7.2 | No fix listed |
| harmoni | = 0.7.6 | No fix listed |
| harmoni | = 0.7.7 | No fix listed |
| harmoni | = 0.9.0 | No fix listed |
| harmoni | = 0.10.1 | No fix listed |
| harmoni | = 0.11.0 | No fix listed |
| harmoni | = 0.12.0 | No fix listed |
| harmoni | = 0.12.1 | No fix listed |
| harmoni | = 0.12.3 | No fix listed |
| harmoni | = 0.13.0 | No fix listed |
Show 20 more
| Product | Affected versions | Fixed in |
|---|---|---|
| harmoni | = 0.13.1 | No fix listed |
| harmoni | = 0.13.2 | No fix listed |
| harmoni | = 0.13.3 | No fix listed |
| harmoni | = 0.13.4 | No fix listed |
| harmoni | = 0.13.5 | No fix listed |
| harmoni | = 0.13.6 | No fix listed |
| harmoni | = 0.13.7 | No fix listed |
| harmoni | = 1.0.0 | No fix listed |
| harmoni | = 1.0.1 | No fix listed |
| harmoni | = 1.0.2 | No fix listed |
| harmoni | = 1.0.3 | No fix listed |
| harmoni | = 1.0.5 | No fix listed |
| harmoni | = 1.0.6 | No fix listed |
| harmoni | = 1.1.0 | No fix listed |
| harmoni | = 1.3.0 | No fix listed |
| harmoni | = 1.3.2 | No fix listed |
| harmoni | = 1.3.4 | No fix listed |
| harmoni | = 1.3.5 | No fix listed |
| harmoni | = 1.4.2 | No fix listed |
| harmoni | = 1.4.6 | No fix listed |
References
- 31503 third-party-advisory vendor-advisory
- sourceforge.net
- sourceforge.net
- 30706 patch vdb-entry
- harmoni-unspecified-csrf(44483) vdb-entry
- oval:org.mitre.oval:def:6427 signature vdb-entry