Cerb
1 CVEs
product
Monthly
Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.
CSRF
PHP
Cerb
NVD
GitHub
Exploit-DB
CVSS 2.0
6.8
EPSS
5.1%
EPSS 5%
CVSS 6.8
MEDIUM
POC
This Month
Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.
CSRF
PHP
Cerb
NVD
GitHub
Exploit-DB