CVE-2013-3513 Multiple cross-site request forgery (CSRF) vulnerabilities in the Noma component in GroundWork Monitor Enterprise 6.7.0 allow remote attackers to hijack the authentication of unspecified victims for r...
MediumCVSS 6.8
EPSS 0.72%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the Noma component in GroundWork Monitor Enterprise 6.7.0 allow remote attackers to hijack the authentication of unspecified victims for requests that (1) store XSS sequences or (2) delete entries.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gwos groundwork monitor | = 6.7.0 | No fix listed |
References
- VU#345260 third-party-advisory us-government-resource
- kb.groundworkopensource.com
- www.sec-consult.com