{"id":"CVE-2012-3532","aliases":["EUVD-2012-3483","GHSA-fpcp-pjgq-5rf9"],"status":"published","title":"Cross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss...","description":"Cross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00657,"percentile":0.51755,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2013-04-12T22:00:00Z","modified":"2026-06-16T23:43:25Z","products":[{"vendor":"redhat","product":"jboss_enterprise_portal_platform"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2013-0733.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/53005","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=851046","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/59015","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3532"},{"url":"https://github.com/advisories/GHSA-fpcp-pjgq-5rf9"}],"sources":{"cve":[{"id":"CVE-2012-3532","description":"Cross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.","status":"published","published":"2013-04-12T22:00:00Z","modified":"2024-08-06T20:05:12.776Z","updated_at":"2026-11-02T14:34:50.615647Z"}],"euvd":[{"id":"EUVD-2012-3483","description":"Cross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.","status":"published","published":"2013-04-12T22:00:00Z","modified":"2024-08-06T20:05:12Z","updated_at":"2026-11-03T01:56:10.882899Z"}],"ghsa":[{"id":"GHSA-fpcp-pjgq-5rf9","title":"Cross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss...","description":"Cross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.","status":"published","published":"2022-05-17T05:11:40Z","modified":"2023-01-28T05:03:40Z","cwes":["CWE-352"],"updated_at":"2026-11-02T14:44:01.162268Z"}],"nvd":[{"id":"CVE-2012-3532","description":"Cross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.","status":"published","published":"2013-04-12T22:55:00.95Z","modified":"2026-06-16T23:43:25.267Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:02:17.375282Z"}]}}