Skip to content

CVE-2015-6007

Cross-site request forgery (CSRF) vulnerability in Web Reference Database (aka refbase) through 0...

6.8 Medium

CVE-2015-6007 is a medium vulnerability (CVSS 6.8) in Refbase, published September 28, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.66%, the 51st percentile. No source names a fixed version.

Cross-site request forgery (CSRF) vulnerability in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to hijack the authentication of arbitrary users.

Exploit likelihood

0.66%Down 0.4 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Cross-site request forgery (CSRF) vulnerability in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to hijack the authentication of arbitrary users.

Record: CVE-2015-6007
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-352
Updated: 2026-11-02

CVE List No score

Cross-site request forgery (CSRF) vulnerability in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to hijack the authentication of arbitrary users.

Record: CVE-2015-6007
Updated: 2026-11-02

EUVDEUVD-2015-5950 No score

Cross-site request forgery (CSRF) vulnerability in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to hijack the authentication of arbitrary users.

Record: EUVD-2015-5950
Updated: 2026-11-03

GitHub AdvisoriesGHSA-v5vg-2434-2q2g No score

Cross-site request forgery (CSRF) vulnerability in Web Reference Database (aka refbase) through 0...

Cross-site request forgery (CSRF) vulnerability in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to hijack the authentication of arbitrary users.

Record: GHSA-v5vg-2434-2q2g
Weakness: CWE-352
Updated: 2026-11-02

Affected products

refbase

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References