CVEvulnerability

CVE-2011-2085

6.8 MEDIUM Published 2012-06-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-06-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users.

Affected configurations

• bestpractical rt (<= 3.8.11) • bestpractical rt 1.0.0 • bestpractical rt 1.0.1 • bestpractical rt 1.0.2 • bestpractical rt 1.0.3 • bestpractical rt 1.0.4 • bestpractical rt 1.0.5 • bestpractical rt 1.0.6 • bestpractical rt 1.0.7 • bestpractical rt 2.0.0 • bestpractical rt 2.0.1 • bestpractical rt 2.0.2 • bestpractical rt 2.0.3 • bestpractical rt 2.0.4 • bestpractical rt 2.0.5 • bestpractical rt 2.0.5.1 • bestpractical rt 2.0.5.3 • bestpractical rt 2.0.6 • bestpractical rt 2.0.7 • bestpractical rt 2.0.8 • bestpractical rt 2.0.8.2 • bestpractical rt 2.0.9 • bestpractical rt 2.0.11 • bestpractical rt 2.0.12 • bestpractical rt 2.0.13 • bestpractical rt 2.0.14 • bestpractical rt 2.0.15 • bestpractical rt 3.0.0 • bestpractical rt 3.0.1 • bestpractical rt 3.0.2 • bestpractical rt 3.0.3 • bestpractical rt 3.0.4 • bestpractical rt 3.0.5 • bestpractical rt 3.0.6 • bestpractical rt 3.0.7 • bestpractical rt 3.0.7.1 • bestpractical rt 3.0.8 • bestpractical rt 3.0.9 • bestpractical rt 3.0.10 • bestpractical rt 3.0.11 • bestpractical rt 3.0.12 • bestpractical rt 3.1.2 • bestpractical rt 3.1.3 • bestpractical rt 3.1.4 • bestpractical rt 3.1.5 • bestpractical rt 3.1.6 • bestpractical rt 3.1.7 • bestpractical rt 3.1.8 • bestpractical rt 3.1.10 • bestpractical rt 3.1.11 • bestpractical rt 3.1.12 • bestpractical rt 3.1.13 • bestpractical rt 3.1.14 • bestpractical rt 3.1.15 • bestpractical rt 3.1.16 • bestpractical rt 3.1.17 • bestpractical rt 3.2.0 • bestpractical rt 3.2.1 • bestpractical rt 3.2.2 • bestpractical rt 3.2.3 … and 49 more

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References