Strix
26.1K

CVE-2008-3716

UnknownEPSS 0.56%

Last modified

CVE-2008-3716 is a vulnerability of currently unknown severity. Cross-site request forgery (CSRF) vulnerability in Harmoni before 1.6.0 allows remote attackers to make administrative modifications via a (1) save or (2) delete action to an unspecified component.. EPSS estimates a 0.56% chance of exploitation in the next 30 days.

Description

Cross-site request forgery (CSRF) vulnerability in Harmoni before 1.6.0 allows remote attackers to make administrative modifications via a (1) save or (2) delete action to an unspecified component.

Metrics

EPSS Probability
0.56%

42.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
HarmoniHarmoni<= 1.4.7
HarmoniHarmoni0.0.2
HarmoniHarmoni0.0.3
HarmoniHarmoni0.0.4
HarmoniHarmoni0.0.5
HarmoniHarmoni0.1.0
HarmoniHarmoni0.2.0
HarmoniHarmoni0.3.0
HarmoniHarmoni0.3.1
HarmoniHarmoni0.3.2
HarmoniHarmoni0.5.1
HarmoniHarmoni0.6.0
HarmoniHarmoni0.6.2
HarmoniHarmoni0.7.0
HarmoniHarmoni0.7.1
HarmoniHarmoni0.7.2
HarmoniHarmoni0.7.6
HarmoniHarmoni0.7.7
HarmoniHarmoni0.9.0
HarmoniHarmoni0.10.1
HarmoniHarmoni0.11.0
HarmoniHarmoni0.12.0
HarmoniHarmoni0.12.1
HarmoniHarmoni0.12.3
HarmoniHarmoni0.13.0
HarmoniHarmoni0.13.1
HarmoniHarmoni0.13.2
HarmoniHarmoni0.13.3
HarmoniHarmoni0.13.4
HarmoniHarmoni0.13.5
HarmoniHarmoni0.13.6
HarmoniHarmoni0.13.7
HarmoniHarmoni1.0.0
HarmoniHarmoni1.0.1
HarmoniHarmoni1.0.2
HarmoniHarmoni1.0.3
HarmoniHarmoni1.0.5
HarmoniHarmoni1.0.6
HarmoniHarmoni1.1.0
HarmoniHarmoni1.3.0
HarmoniHarmoni1.3.2
HarmoniHarmoni1.3.4
HarmoniHarmoni1.3.5
HarmoniHarmoni1.4.2
HarmoniHarmoni1.4.6

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2008-3716?
Cross-site request forgery (CSRF) vulnerability in Harmoni before 1.6.0 allows remote attackers to make administrative modifications via a (1) save or (2) delete action to an unspecified component.
How severe is CVE-2008-3716?
Severity scoring for CVE-2008-3716 is pending analysis. The EPSS model estimates a 0.56% probability of exploitation in the next 30 days.
How do I fix CVE-2008-3716?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2008-3716?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST