Unscored CVE-2015-2954 EUVD-2015-3038GHSA-fg4r-gvrc-v26g

Cross-site request forgery (CSRF) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote …

Published Jun 13, 2015 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site request forgery (CSRF) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to hijack the authentication of arbitrary users.

References

JVN#12241436 third-party-advisory
JVNDB-2015-000079 third-party-advisory
75072 vdb-entry
http://jvn.jp/en/jp/JVN12241436/995646/index.html