CVE-2011-2191
N/A
Published: October 7, 2011 at 01:00 AM UTC
Updated: June 16, 2026 at 11:30 PM UTC
1 product affected across 1 vendorCherokee
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 1%
Description
Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences, as demonstrated by a crafted nickname field to vserver/apply.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 1.2.980.10.00.10.10.11.00.11.10.11.20.11.30.11.40.11.50.11.60.3.00.4.00.4.10.4.100.4.110.4.120.4.130.4.140.4.150.4.160.4.170.4.180.4.190.4.20.4.200.4.210.4.220.4.230.4.240.4.250.4.260.4.270.4.280.4.290.4.30.4.300.4.40.4.50.4.60.4.70.4.80.4.90.5.00.5.10.5.20.5.30.5.40.5.50.5.60.6.00.6.10.7.00.7.10.7.20.8.00.8.10.9.00.9.10.9.20.9.30.9.40.98.00.98.10.99.00.99.070.99.10.99.100.99.110.99.120.99.130.99.140.99.150.99.160.99.170.99.180.99.190.99.20.99.200.99.210.99.220.99.230.99.240.99.250.99.260.99.270.99.280.99.290.99.30.99.300.99.310.99.320.99.330.99.340.99.350.99.360.99.370.99.380.99.390.99.40.99.400.99.410.99.420.99.430.99.440.99.450.99.460.99.470.99.480.99.490.99.50.99.60.99.80.99.91.0.01.0.11.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.21.0.201.0.31.0.41.0.51.0.61.0.71.0.81.0.91.2.01.2.11.2.2
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (10)
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066222.htmlMailing Listx_refsource_FULLDISC
Source: [email protected]
http://seclists.org/fulldisclosure/2011/Jun/0x_refsource_CONFIRMPatch
Source: [email protected]
http://www.cherokee-project.com/download/LATEST_is_1.2.99/cherokee-1.2.99.tar.gzMailing Listx_refsource_MLIST
Source: [email protected]
http://www.openwall.com/lists/oss-security/2011/06/02/2Mailing Listx_refsource_MLISTExploit
Source: [email protected]
http://www.openwall.com/lists/oss-security/2011/06/03/6Mailing Listx_refsource_MLISTExploit
Source: [email protected]
http://www.openwall.com/lists/oss-security/2011/06/06/22Quick Info
StatusMODIFIED
CWE
CWE-352
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card