medium6.8Public exploit code
CVE-2013-7057
Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and earlier allows remote attackers to hijack the authentication of unspecifie…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Axway Secure Transport 5.1 SP2 - Arbitrary File Upload (via Cross-Site Request Forgery)2014-10-23 · webapps · php
Impact
Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that upload arbitrary files via a crafted request to api/v1.0/files/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Axway | Securetransport | through 5.1 |