Unscored CVE-2019-11517 EUVD-2019-3188GHSA-8hc5-v62f-53vj

WampServer before 3.1.9 has CSRF in add_vhost.php because the synchronizer pattern implemented as remediation of CVE-2018-8817 was incomple…

Published Jun 10, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

WampServer before 3.1.9 has CSRF in add_vhost.php because the synchronizer pattern implemented as remediation of CVE-2018-8817 was incomplete. An attacker could add/delete any vhosts without the consent of the owner.

References

20190610 CVE-2019-11517: CSRF in Wampserver 3.1.4-3.1.8 mailing-list