CVE-2016-3098

EPSS 0.3%CWE-352

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

05 Aug 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code.

Affected products

n/a · administrate

References

https://seclists.org/oss-sec/2016/q2/0