CVE-2009-4079
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2009-4079
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2009-4079.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2009-4079
- Published
- 2009-11-25T22:00:00Z
- Modified
- 2025-02-07T05:00:03Z
- Summary
- [none]
- Details
-
Cross-site request forgery (CSRF) vulnerability in Redmine 0.8.5 and earlier allows remote attackers to hijack the authentication of users for requests that delete a ticket via unspecified vectors.
- References
-
- http://secunia.com/advisories/37420
- http://www.vupen.com/english/advisories/2009/3291
- http://jvn.jp/en/jp/JVN87341298/index.html
- http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000074.html
- http://rubyforge.org/frs/shownotes.php?release_id=41440
- http://www.redmine.org/wiki/redmine/Changelog#v087-2009-11-15
- http://www.securityfocus.com/bid/37066
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54334
- https://security-tracker.debian.org/tracker/CVE-2009-4079
Affected packages
Debian:12 / redmine
Package
- Name
- redmine
- Purl
- pkg:deb/debian/redmine?arch=source