CVE-2015-2954 Cross-site request forgery (CSRF) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to hijack the authentication of arbitrary users.
MediumCVSS 6.8
EPSS 0.64%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to hijack the authentication of arbitrary users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| igreks milkystep light | <= 0.94 | No fix listed |
| igreks milkystep professional | <= 1.82 | No fix listed |
| igreks milkystep professional oem | <= 1.82 | No fix listed |
References
- jvn.jp
- JVN#12241436 third-party-advisory vendor-advisory
- JVNDB-2015-000079 third-party-advisory vendor-advisory
- 75072 vdb-entry