Security Advisory

CVE-2019-11517

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-06-10 17:47:49
Last updated 2024-08-04 22:55:40
Assigner mitre
State PUBLISHED

Description

WampServer before 3.1.9 has CSRF in add_vhost.php because the synchronizer pattern implemented as remediation of CVE-2018-8817 was incomplete. An attacker could add/delete any vhosts without the consent of the owner.