CVE-2017-15608: Cross-Site Request Forgery (CSRF)

September 26, 2018 (updated November 23, 2018)

Inedo ProGet Beta5 has CSRF, allowing an attacker to change advanced settings.

References

inedo.com/blog/proget-50-beta5-released
inedo.myjetbrains.com/youtrack/issue/PG-1118
nvd.nist.gov/vuln/detail/CVE-2017-15608

Detect and mitigate CVE-2017-15608 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →