CVE-2009-1455 - Multiple cross-site request forgery (CSRF) vulnerabilities in WebCollab before 2.50 (aka Billy Goat) allow remote attackers to hijack the authentication of administrators for requests that change an arbitrary password or have other unspecified impact

Back Back to CVE browser

MEDIUM

Multiple cross-site request forgery (CSRF) vulnerabilities in WebCollab before 2.50 (aka Billy Goat) allow remote attackers to hijack the authentication of administrators for requests that change an arbitrary password or have other unspecified impact

Published Apr 28, 2009

6.8

MEDIUM

CVSS 2.0

EPSS 0.60%

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in WebCollab before 2.50 (aka Billy Goat) allow remote attackers to hijack the authentication of administrators for requests that change an arbitrary password or have other unspecified impact.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (5)

http://holisticinfosec.org/content/view/108/45/
x_refsource_MISCPatch
http://secunia.com/advisories/34568
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=676245&group_id=75945
x_refsource_CONFIRMPatch
http://www.osvdb.org/53781
vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/49940
vdb-entryx_refsource_XF

Link	Providers	Tags
http://holisticinfosec.org/content/view/108/45/		x_refsource_MISCPatch
http://secunia.com/advisories/34568		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=676245&group_id=75945		x_refsource_CONFIRMPatch
http://www.osvdb.org/53781		vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/49940		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 28, 2009

Updated Aug 7, 2024

Reserved Apr 28, 2009

Link CVE-2009-1455

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-1455

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-1455