CVE-2008-3760 Cross-site request forgery (CSRF) vulnerability in the sign-out page in Vanilla 1.1.4 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a lo...
MediumCVSS 4.3
EPSS 0.73%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in the sign-out page in Vanilla 1.1.4 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout via a SignOutNow action to people.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lussumo vanilla | <= 1.1.4 | No fix listed |
| lussumo vanilla | = 0.9.2 | No fix listed |
| lussumo vanilla | = 1 | No fix listed |
| lussumo vanilla | = 1.0.1 | No fix listed |
| lussumo vanilla | = 1.0.2 | No fix listed |
| lussumo vanilla | = 1.0.3 | No fix listed |
| lussumo vanilla | = 1.1 | No fix listed |
| lussumo vanilla | = 1.1.1 | No fix listed |
| lussumo vanilla | = 1.1.2 | No fix listed |
| lussumo vanilla | = 1.1.3 | No fix listed |
References
- lussumo.com exploit
- lussumo.com exploit
- lussumo.com
- lussumo.com
- 31527 third-party-advisory vendor-advisory
- vanilla-updatecheck-people-csrf(44558) vdb-entry
- vanilla-people-csrf(44748) vdb-entry