What’s Vulnerable › Vulnerabilities

CVE-2015-2861

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-06-18 · updated 2026-06-17
• Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in Vesta Control Panel before 0.9.8-14 allows remote attackers to hijack the authentication of arbitrary users.

Affected products

• VestaCP Vesta Control Panel: through 0.9.8-12

References

• http://vestacp.com/roadmap/#history
• http://www.kb.cert.org/vuls/id/842780
• http://www.securityfocus.com/bid/75215
• https://github.com/serghey-rodin/vesta/commit/527e4a9a62204be9b34c1338fadfe959b0fd3974
• http://vestacp.com/roadmap/#history
• http://www.kb.cert.org/vuls/id/842780
• http://www.securityfocus.com/bid/75215
• https://github.com/serghey-rodin/vesta/commit/527e4a9a62204be9b34c1338fadfe959b0fd3974

Get alerted when CVE-2015-2861 or the next vulnerability affects your stack