Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to hijack the authentication of users for requests that add projects via an add_project action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SimpleRisk 跨站请求伪造漏洞
Vulnerability Description
SimpleRisk是美国软件开发者Josh Sokol所研发的一套开源的风险管理工具。该工具通过一个风险管理控制面板，跟踪并显示系统、团队和安全技术的状态以及正在进行中的风险化解项目。 SimpleRisk 20130916-001之前版本的management/prioritize_planning.php脚本存在跨站请求伪造漏洞。远程攻击者可通过add_project操作利用该漏洞添加程序。
CVSS Information
N/A
Vulnerability Type
N/A