CVE-2017-15608 Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings.
MediumCVSS 6.5
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| inedo proget | < 5.0.4 | 5.0.4 |
References
- inedo.com product vendor-advisory
- inedo.myjetbrains.com vendor-advisory