high8.8
CVE-2017-10961
REDCap before 7.5.1 has CSRF in the deletion feature of the File Repository and File Upload components.
Impact
REDCap before 7.5.1 has CSRF in the deletion feature of the File Repository and File Upload components.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vanderbilt | Redcap | through 7.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://community.projectredcap.org/articles/13/changelog-standard-release.html
- https://gist.github.com/jordanpotti/fef4f1ada404d5ba7f88ab42e93cdaae
- https://community.projectredcap.org/articles/13/changelog-standard-release.html
- https://gist.github.com/jordanpotti/fef4f1ada404d5ba7f88ab42e93cdaae