CVE-2018-10232
Summary
| CVE | CVE-2018-10232 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-07-11 17:29:00 UTC |
| Updated | 2020-07-20 20:20:00 UTC |
| Description | Cross-site request forgery (CSRF) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers to hijack the authentication of authenticated users for requests that can obtain sensitive information via unspecified vectors. |
Risk And Classification
Problem Types: CWE-352
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Topdesk | Topdesk | All | All | All | All |
| Application | Topdesk | Topdesk | 5.7 | - | All | All |
| Application | Topdesk | Topdesk | 5.7 | service_release1 | All | All |
| Application | Topdesk | Topdesk | 5.7 | service_release2 | All | All |
| Application | Topdesk | Topdesk | 5.7 | service_release3 | All | All |
| Application | Topdesk | Topdesk | 5.7 | service_release4 | All | All |
| Application | Topdesk | Topdesk | 5.7 | service_release5 | All | All |
| Application | Topdesk | Topdesk | 5.7 | service_release6 | All | All |
| Application | Topdesk | Topdesk | 5.7 | service_release7 | All | All |
| Application | Topdesk | Topdesk | 5.7 | service_release8 | All | All |
| Application | Topdesk | Topdesk | All | All | All | All |
| Application | Topdesk | Topdesk | 5.7 | - | All | All |
| Application | Topdesk | Topdesk | 5.7 | service_release1 | All | All |
| Application | Topdesk | Topdesk | 5.7 | service_release2 | All | All |
| Application | Topdesk | Topdesk | 5.7 | service_release3 | All | All |
| Application | Topdesk | Topdesk | 5.7 | service_release4 | All | All |
| Application | Topdesk | Topdesk | 5.7 | service_release5 | All | All |
| Application | Topdesk | Topdesk | 5.7 | service_release6 | All | All |
| Application | Topdesk | Topdesk | 5.7 | service_release7 | All | All |
| Application | Topdesk | Topdesk | 5.7 | service_release8 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory CVE-2018-10231 and CVE-2018-10232 | CONFIRM | page.topdesk.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.