CVE-2015-2861 Cross-site request forgery (CSRF) vulnerability in Vesta Control Panel before 0.9.8-14 allows remote attackers to hijack the authentication of arbitrary users.
MediumCVSS 6.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in Vesta Control Panel before 0.9.8-14 allows remote attackers to hijack the authentication of arbitrary users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vestacp vesta control panel | <= 0.9.8-12 | No fix listed |
References
- vestacp.com vendor-advisory
- VU#842780 third-party-advisory us-government-resource
- 75215 vdb-entry
- github.com