Vanderbilt vulnerabilities
We track 3 vulnerabilities in Vanderbilt products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 10, 2025.
Latest Vanderbilt vulnerabilities
- 8.8 High severity
REDCap: Cross-Site Request Forgery
An issue was discovered in REDCap 14.9.6. It has an action=myprojects&logout=1 CSRF issue in the alert-title while performing an upload of a CSV file containing a list of alert configuration. An attacker can send the victim a CSV file containing an HTML inject
- 8.8 High severity
Redcap: Cross-Site Request Forgery
REDCap through 14.9.6 has a security flaw in the Notes section of calendar events, exposing users to a Cross-Site Request Forgery (CSRF) attack. An attacker can exploit this by luring users into accessing a calendar event's notes, which triggers a logout reque
- 8.8 High severity
Redcap: Cross-Site Request Forgery
REDCap through 14.9.6 has a security flaw in the Project Dashboards name, exposing users to a Cross-Site Request Forgery (CSRF) attack. An attacker can exploit this by luring users into clicking on a Project Dashboards name that contains the malicious payload,