CyberRota Analysis
AI analysis pending.
CVE
CVE-2018-15682
Severity
HIGH
CVSS
8.8
EPSS
0.54%
Original NVD Description
An issue was discovered in BTITeam XBTIT. Due to a lack of cross-site request forgery protection, it is possible to automate the action of sending private messages to users by luring an authenticated user to a web page that automatically submits a form on their behalf.
Related CVEs
Other vulnerabilities affecting the same vendor(s)