Skip to content

CVE-2014-3881

Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030...

6.8 Medium

CVE-2014-3881 is a medium vulnerability (CVSS 6.8) in Intercom Web Kyukincho, published June 28, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.64%, the 50th percentile. No source names a fixed version.

Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary users.

Exploit likelihood

0.64%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary users.

Record: CVE-2014-3881
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-352
Updated: 2026-11-02

CVE List No score

Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary users.

Record: CVE-2014-3881
Updated: 2026-11-02

EUVDEUVD-2014-3818 No score

Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary users.

Record: EUVD-2014-3818
Updated: 2026-11-03

GitHub AdvisoriesGHSA-2j6m-75p3-p8g5 No score

Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030...

Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary users.

Record: GHSA-2j6m-75p3-p8g5
Weakness: CWE-352
Updated: 2026-11-02

Affected products

intercom web kyukincho

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References