CVE-2018-10232

—

CVSS 3.1

6.5 medium

EPSS

<1%p46

Published

Jul 11, 2018 (Jul 11, 2018)

Modified

Jun 17, 2026

Description

Cross-site request forgery (CSRF) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers to hijack the authentication of authenticated users for requests that can obtain sensitive information via unspecified vectors.

Vendors: topdesk
Products: topdesk
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.