CVE-2012-2564 Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bloxx Web Filtering before 5.0.14 allow remote attackers to hijack the authentication of administrators fo...
MediumCVSS 6.8
EPSS 0.77%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bloxx Web Filtering before 5.0.14 allow remote attackers to hijack the authentication of administrators for requests that perform administrative actions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bloxx web filtering | <= 5.0.13 | No fix listed |
References
- VU#722963 third-party-advisory us-government-resource
- www.kb.cert.org us-government-resource
- 53715 vdb-entry