Vulnetix
Try Vulnetix Request Demo
CVE-2008-5184 PUBLISHED CVSS 10 CRITICAL

The web interface (cgi-bin/admin.c) in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy and conduct CSRF attacks via the (1) add and (2) cancel RSS subscription functions.

EPSS 0.29% · 51.7th percentile

Risk Scores

CVSS v2.0
10
EPSS Score
0.29%
51.7th percentile

Affected Products

VendorProductVersions
applecups1.3.6, 0, 1.1
n/an/an/a

Timeline

References

Open in Interactive Console →