OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web interface lacks CSRF protection.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HOpenmicroscopy Omero
APPOpenmicroscopy< 5.0.6
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2018-1000633HIGH7.2ten sam produkt
The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log ...
CVE-2018-1000634HIGH7.2ten sam produkt
The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulner...
CVE-2017-1000438HIGH8.3ten sam produkt
In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to a...
CVE-2019-16245MEDIUM5.3ten sam produkt
OMERO before 5.6.1 makes the details of each user available to all users.
CVE-2018-1000635MEDIUM6.7ten sam produkt
The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Se...