Unrated severityNVD Advisory· Published May 13, 2014· Updated Jun 17, 2026
CVE-2014-2989
CVE-2014-2989
Description
Cross-site request forgery (CSRF) vulnerability in Open Assessment Technologies TAO 2.5.6 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via a request to Users/add.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2=2.5.6+ 1 more
- (no CPE)range: =2.5.6
- cpe:2.3:a:open_assessment_technologies_:tao:2.5.6:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- www.htbridge.com/advisory/HTB23211nvdExploit
- secunia.com/advisories/58539nvdVendor Advisory
- www.securityfocus.com/bid/67291nvd
News mentions
0No linked articles in our index yet.