Skip to content
OpenAdvisories
Unscored CVE-2017-2102 EUVD-2017-11285GHSA-6x9m-3gr2-p7q9

Cross-site request forgery (CSRF) vulnerability in Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and earlier al…

Published Apr 28, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Product: Hands-on Vulnerability Learning Tool "AppGoat" for Web Application

Description

Cross-site request forgery (CSRF) vulnerability in Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

VendorProductAffectedFixed
INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and earlier —

References