MODX Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2014-8773 - Vulnerability Database

MODX Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2014-8773

Medium

Reference: CVE-2014-8773

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-8773

Title: MODX Cross-Site Request Forgery (CSRF) Vulnerability

Overview:

MODX Revolution 2.x before 2.2.15 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism by (1) omitting the CSRF token or via a (2) long string in the CSRF token parameter.