CVE-2017-12584

High

Published: 06/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

SLiMS 8 Akasia through version 8.3.1 lacks CSRF protections. This allows remote attackers to trick a user into changing to an attacker-controlled password, leading to complete account takeover.

Risk Assessment

The lack of proper protections can lead to serious security breaches, including user account takeovers, which jeopardize the integrity of organizational data.

Recommendation

It is recommended to implement CSRF protection mechanisms and enforce the requirement of providing the current password when changing user data.

Other vulnerabilities in SLiMS 8 Akasia

CVE-2017-12585High
SLiMS 8 Akasia versions up to 8.3.1 have SQL injection vulnerabilities in admin/AJAX_lookup_handler.php (tableName and tableFields parameters), admin/AJAX_check_id.php, and admin/AJAX_vocabolary_control.php. It can be exploited by remote authenticated librarian users.

Original NVD description (English source)

There is no CSRF mitigation in SLiMS 8 Akasia through 8.3.1. Also, an entire user profile (including the password) can be updated without sending the current password. This allows remote attackers to trick a user into changing to an attacker-controlled password, a complete account takeover, via the passwd1 and passwd2 fields in an admin/modules/system/app_user.php changecurrent=true operation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS