CVE-2019-6507

An issue was discovered in creditease-sec insight through 2018-09-11. login_user_delete in srcpm/app/admin/views.py allows CSRF.
References
Link Resource
https://github.com/creditease-sec/insight/issues/42 Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:creditease-sec:insight:*:*:*:*:*:*:*:*

Information

Published : 2019-01-22 08:29

Updated : 2019-01-23 07:12


NVD link : CVE-2019-6507

Mitre link : CVE-2019-6507


JSON object : View

CWE
CWE-352

Cross-Site Request Forgery (CSRF)

Advertisement

dedicated server usa

Products Affected

creditease-sec

  • insight