CVE-2013-7251 - CVE House
Back to Database
Status published Medium CVE-2013-7251

Multiple cross-site request forgery (CSRF) vulnerabilities in ProjectForge before 5.3...

Vulnerability Description

Multiple cross-site request forgery (CSRF) vulnerabilities in ProjectForge before 5.3 allow remote attackers to hijack the authentication of arbitrary users via vectors related to (1) web/admin/, (2) web/core/, (3) web/dialog/, (4) web/fibu/, (5) web/mobile/, (6) web/task/, or (7) web/wicket/.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-7251

Credits & Attribution

No credits recorded in the NVD database.

References

More from projectforge

View All →
CVE-2013-7250
Cross-site scripting (XSS) vulnerability in the JsonBuilder implementation in ProjectForge...
Low 3.5
CVE-2011-5269
Cross-site scripting (XSS) vulnerability in ProjectForge before 3.5.3 allows remote...
Low 3.5

Affected Vendor

projectforge

View all reports →

Affected Software

projectforge
Vulnerable Versions:
0, 5.0, 5.1

Timeline

Official Publish: January 2nd, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.