Description

MODX Revolution 2.x before 2.2.15 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism by (1) omitting the CSRF token or via a (2) long string in the CSRF token parameter.

Remediation

References

CVE-2014-8773

Related Vulnerabilities

WordPress Plugin CM Pop-Up banners for WordPress SQL Injection (1.5.10)

WordPress Plugin Product Subtitle For WooCommerce Arbitrary File Disclosure (4.1)

WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.5)

Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-2666)

Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4464)

Severity

Medium

Classification

CVE-2014-8773 CWE-352

Tags

Missing Update Known Vulnerabilities