Piwigo Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2014-4614 - Vulnerability Database

Piwigo Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2014-4614

Medium

Reference: CVE-2014-4614

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-4614

Title: Piwigo Cross-Site Request Forgery (CSRF) Vulnerability

Overview:

Multiple cross-site request forgery (CSRF) vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the (1) pwg.groups.addUser (2) pwg.groups.deleteUser (3) pwg.groups.setInfo (4) pwg.users.setInfo (5) pwg.permissions.add or (6) pwg.permissions.remove method.