CVE-2013-5708 Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via vecto...
MediumCVSS 6.8
EPSS 0.70%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via vectors related to cookies, a different vulnerability than CVE-2013-3605.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trivantis coursemill learning management system | = 6.8 | No fix listed |
References
- VU#960908 third-party-advisory us-government-resource