Vulnerability Database

308,681

Total vulnerabilities in the database

CVE-2012-1058

Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php.

  • Published: Feb 14, 2012
  • Updated: Nov 9, 2025
  • CVE: CVE-2012-1058
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6
  • AV:N/AC:M/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
flyspray / flyspray 0.9.9.6 0.9.9.6.x