CVE-2017-1300 Cross-site request forgery in OpenPages GRC Platform

What is CVE-2017-1300?

CVE-2017-1300 is a high-severity vulnerability in IBM OpenPages GRC Platform, published on 1 Nov 2017. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 125162.

Weakness: CWE-352

Which versions are affected by CVE-2017-1300?

It affects 1 product.

Products include Ibm Openpages Grc Platform.

How do I fix CVE-2017-1300?

No fix has been published for CVE-2017-1300 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-1300 being exploited?

There is no known exploitation of CVE-2017-1300 in the wild and no public exploit code.

Other vulnerabilities in IBM OpenPages GRC Platform

• CVE-2015-0145 Cross-site request forgery in n/a Medium 6.8
• CVE-2024-35151 IBM OpenPages information disclosure Medium 6.5
• CVE-2011-1381 Auth bypass in n/a Medium 6.4
• CVE-2017-1679 Information disclosure in OpenPages GRC Platform Medium 6.2
• CVE-2020-4535 Cross-site scripting in OpenPages GRC Platform Medium 5.4

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-cxp8-97m5-qvpr.