CVE-2015-1585

6.8

MEDIUMCVSS v2

Published

February 19, 2015

Affected

1 project

Assigned by

MITRE

Severity scale

010

Description

Fat Free CRM before 0.13.6 allows remote attackers to conduct cross-site request forgery (CSRF) attacks via a request without the authenticity_token, as demonstrated by a crafted HTML page that creates a new administrator account.

fatfreecrm/fat_free_crm

GitHubRuby on Rails CRM platform

<= 0.13.5, < 0.13.6NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2015-1585

Description

More on this CVE