CVE-2013-5708
Last modified
CVE-2013-5708 is a vulnerability of currently unknown severity. Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via vectors related to cookies, a different vulnerability than CVE-2013-3605.. EPSS estimates a 0.70% chance of exploitation in the next 30 days.
Description
Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via vectors related to cookies, a different vulnerability than CVE-2013-3605.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Trivantis | Coursemill Learning Management System | 6.8 |
References
- http://www.kb.cert.org/vuls/id/960908US Government Resource
- http://www.kb.cert.org/vuls/id/960908US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-5708?
How severe is CVE-2013-5708?
How do I fix CVE-2013-5708?
Are you affected by CVE-2013-5708?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
