CVE-2018-25096

Published: Dic 30, 2023 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2018-13848 Aliases: GSD-2018-25096
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 4,3
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: none
Integrity: low
Availability: none
MEDIUM 5,0
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: none
Integrity: partial
Availability: none

Description

AI Translation Available

A vulnerability was found in MdAlAmin-aol Own Health Record 0.1-alpha/0.2-alpha/0.3-alpha/0.3.1-alpha. It has been rated as problematic. This issue affects some unknown processing of the file includes/logout.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. Upgrading to version 0.4-alpha is able to address this issue. The patch is named 58b413aa40820b49070782c786c526850ab7748f. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-249191.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0005
Percentile
0,2th
Updated

EPSS Score Trend (Last 90 Days)

352

Cross-Site Request Forgery (CSRF)

Stable
Abstraction: Compound Structure: Composite
Common Consequences
Security Scopes Affected:
Confidentiality Integrity Availability Non-Repudiation Access Control
Potential Impacts:
Gain Privileges Or Assume Identity Bypass Protection Mechanism Read Application Data Modify Application Data Dos: Crash, Exit, Or Restart
Applicable Platforms
Technologies: Web Based, Web Server
Likelihood of Exploit: Medium
View CWE Details
Application

Ownhealthrecord by Petrk94

Product Information
Vendor Petrk94
Product Ownhealthrecord
Version Range Affected
To 0.4 (exclusive)
cpe:2.3:a:petrk94:ownhealthrecord:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://github.com/MdAlAmin-aol/ownhealthrecord/commit/58b4…
Patch
https://github.com/MdAlAmin-aol/ownhealthrecord/commit/58b413aa40820b49070782c7…
https://github.com/MdAlAmin-aol/ownhealthrecord/releases/ta…
Patch
https://github.com/MdAlAmin-aol/ownhealthrecord/releases/tag/v0.4-alpha
https://vuldb.com/?ctiid.249191
Permissions Required Third Party Advisory
https://vuldb.com/?ctiid.249191
https://vuldb.com/?id.249191
Third Party Advisory
https://vuldb.com/?id.249191
https://github.com/MdAlAmin-aol/ownhealthrecord/commit/58b4…
Patch
https://github.com/MdAlAmin-aol/ownhealthrecord/commit/58b413aa40820b49070782c7…
https://github.com/MdAlAmin-aol/ownhealthrecord/releases/ta…
Patch
https://github.com/MdAlAmin-aol/ownhealthrecord/releases/tag/v0.4-alpha
https://vuldb.com/?ctiid.249191
Permissions Required Third Party Advisory
https://vuldb.com/?ctiid.249191
https://vuldb.com/?id.249191
Third Party Advisory
https://vuldb.com/?id.249191