CVE-2015-4619 Spina gem vulnerable to Cross-site request forgery (CSRF) vulnerability
HighCVSS 8.8
EPSS 0.90%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Cross-site request forgery (CSRF) vulnerability in Spina before commit bfe44f289e336f80b6593032679300c493735e75.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems spina(RubyGems) | < 0.6.29 | 0.6.29 |
| rubygems spina(RubyGems) | = 0.6.11 | No fix listed |
| rubygems spina(RubyGems) | = 0.6.12 | No fix listed |
| rubygems spina(RubyGems) | = 0.6.13 | No fix listed |
| rubygems spina(RubyGems) | = 0.6.14 | No fix listed |
| rubygems spina(RubyGems) | = 0.6.15 | No fix listed |
| rubygems spina(RubyGems) | = 0.6.16 | No fix listed |
| rubygems spina(RubyGems) | = 0.6.17 | No fix listed |
| rubygems spina(RubyGems) | = 0.6.18 | No fix listed |
| rubygems spina(RubyGems) | = 0.6.19 | No fix listed |
| rubygems spina(RubyGems) | = 0.6.20 | No fix listed |
| rubygems spina(RubyGems) | = 0.6.21 | No fix listed |
| rubygems spina(RubyGems) | = 0.6.22 | No fix listed |
| rubygems spina(RubyGems) | = 0.6.23 | No fix listed |
| rubygems spina(RubyGems) | = 0.6.24 | No fix listed |
| rubygems spina(RubyGems) | = 0.6.25 | No fix listed |
| rubygems spina(RubyGems) | = 0.6.26 | No fix listed |
| rubygems spina(RubyGems) | = 0.6.27 | No fix listed |
| rubygems spina(RubyGems) | = 0.6.28 | No fix listed |
| denkgroot spina | <= 0.11.1 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com issue-tracking patch third-party-advisory
- [oss-security] 20150616 Re: Cross-Site Request Forgery in Spina CMS mailing-list patch third-party-advisory
- github.com exploit
- www.openwall.com
- 75216 third-party-advisory vdb-entry
- github.com
- github.com product