high8.8
CVE-2014-7198
OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web interface lacks CSRF protection.
Impact
OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web interface lacks CSRF protection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openmicroscopy | Omero | before 5.0.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.openmicroscopy.org.uk/pipermail/ome-users/2014-November/004871.html
- https://www.openmicroscopy.org/security/advisories/2014-SV3-csrf/
- http://lists.openmicroscopy.org.uk/pipermail/ome-users/2014-November/004871.html
- https://www.openmicroscopy.org/security/advisories/2014-SV3-csrf/