Unscored CVE-2005-3129 EUVD-2005-3129GHSA-fqqf-x789-rf7j

Cross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as…

Published Oct 4, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag to serendipity_admin.php.

References

20050929 Serendipity: Account Hijacking / CSRF Vulnerability mailing-list
20050929 Serendipity: Account Hijacking / CSRF Vulnerability mailing-list
17011 third-party-advisory
serendipity-xs-request-forgery(22456) vdb-entry