CVE-2011-2191

Published: Oct 7, 2011Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences, as demonstrated by a crafted nickname field to vserver/apply.

Affected (137)

Products: Cherokee Project: Cherokee

Cherokee Project

1 product

Cherokee

Configuration A

137 vulnerable

Vulnerable Software	Affected Versions
Cherokee Project Cherokee	Up to 1.2.98
Cherokee Project Cherokee	Version 0.10.0
Cherokee Project Cherokee	Version 0.10.1
Cherokee Project Cherokee	Version 0.11.0
Cherokee Project Cherokee	Version 0.11.1
Cherokee Project Cherokee	Version 0.11.2
Cherokee Project Cherokee	Version 0.11.3
Cherokee Project Cherokee	Version 0.11.4
Cherokee Project Cherokee	Version 0.11.5
Cherokee Project Cherokee	Version 0.11.6
Cherokee Project Cherokee	Version 0.3.0
Cherokee Project Cherokee	Version 0.4.0
Cherokee Project Cherokee	Version 0.4.10
Cherokee Project Cherokee	Version 0.4.11
Cherokee Project Cherokee	Version 0.4.12
Cherokee Project Cherokee	Version 0.4.13
Cherokee Project Cherokee	Version 0.4.14
Cherokee Project Cherokee	Version 0.4.15
Cherokee Project Cherokee	Version 0.4.16
Cherokee Project Cherokee	Version 0.4.17
Cherokee Project Cherokee	Version 0.4.18
Cherokee Project Cherokee	Version 0.4.19
Cherokee Project Cherokee	Version 0.4.1
Cherokee Project Cherokee	Version 0.4.20
Cherokee Project Cherokee	Version 0.4.21
Cherokee Project Cherokee	Version 0.4.22
Cherokee Project Cherokee	Version 0.4.23
Cherokee Project Cherokee	Version 0.4.24
Cherokee Project Cherokee	Version 0.4.25
Cherokee Project Cherokee	Version 0.4.26
Cherokee Project Cherokee	Version 0.4.27
Cherokee Project Cherokee	Version 0.4.28
Cherokee Project Cherokee	Version 0.4.29
Cherokee Project Cherokee	Version 0.4.2
Cherokee Project Cherokee	Version 0.4.30
Cherokee Project Cherokee	Version 0.4.3
Cherokee Project Cherokee	Version 0.4.4
Cherokee Project Cherokee	Version 0.4.5
Cherokee Project Cherokee	Version 0.4.6
Cherokee Project Cherokee	Version 0.4.7
Cherokee Project Cherokee	Version 0.4.8
Cherokee Project Cherokee	Version 0.4.9
Cherokee Project Cherokee	Version 0.5.0
Cherokee Project Cherokee	Version 0.5.1
Cherokee Project Cherokee	Version 0.5.2
Cherokee Project Cherokee	Version 0.5.3
Cherokee Project Cherokee	Version 0.5.4
Cherokee Project Cherokee	Version 0.5.5
Cherokee Project Cherokee	Version 0.5.6
Cherokee Project Cherokee	Version 0.6.0
Cherokee Project Cherokee	Version 0.6.1
Cherokee Project Cherokee	Version 0.7.0
Cherokee Project Cherokee	Version 0.7.1
Cherokee Project Cherokee	Version 0.7.2
Cherokee Project Cherokee	Version 0.8.0
Cherokee Project Cherokee	Version 0.8.1
Cherokee Project Cherokee	Version 0.9.0
Cherokee Project Cherokee	Version 0.9.1
Cherokee Project Cherokee	Version 0.9.2
Cherokee Project Cherokee	Version 0.9.3
Cherokee Project Cherokee	Version 0.9.4
Cherokee Project Cherokee	Version 0.98.0
Cherokee Project Cherokee	Version 0.98.1
Cherokee Project Cherokee	Version 0.99.07
Cherokee Project Cherokee	Version 0.99.0
Cherokee Project Cherokee	Version 0.99.10
Cherokee Project Cherokee	Version 0.99.11
Cherokee Project Cherokee	Version 0.99.12
Cherokee Project Cherokee	Version 0.99.13
Cherokee Project Cherokee	Version 0.99.14
Cherokee Project Cherokee	Version 0.99.15
Cherokee Project Cherokee	Version 0.99.16
Cherokee Project Cherokee	Version 0.99.17
Cherokee Project Cherokee	Version 0.99.18
Cherokee Project Cherokee	Version 0.99.19
Cherokee Project Cherokee	Version 0.99.1
Cherokee Project Cherokee	Version 0.99.20
Cherokee Project Cherokee	Version 0.99.21
Cherokee Project Cherokee	Version 0.99.22
Cherokee Project Cherokee	Version 0.99.23
Cherokee Project Cherokee	Version 0.99.24
Cherokee Project Cherokee	Version 0.99.25
Cherokee Project Cherokee	Version 0.99.26
Cherokee Project Cherokee	Version 0.99.27
Cherokee Project Cherokee	Version 0.99.28
Cherokee Project Cherokee	Version 0.99.29
Cherokee Project Cherokee	Version 0.99.2
Cherokee Project Cherokee	Version 0.99.30
Cherokee Project Cherokee	Version 0.99.31
Cherokee Project Cherokee	Version 0.99.32
Cherokee Project Cherokee	Version 0.99.33
Cherokee Project Cherokee	Version 0.99.34
Cherokee Project Cherokee	Version 0.99.35
Cherokee Project Cherokee	Version 0.99.36
Cherokee Project Cherokee	Version 0.99.37
Cherokee Project Cherokee	Version 0.99.38
Cherokee Project Cherokee	Version 0.99.39
Cherokee Project Cherokee	Version 0.99.3
Cherokee Project Cherokee	Version 0.99.40
Cherokee Project Cherokee	Version 0.99.41
Cherokee Project Cherokee	Version 0.99.42
Cherokee Project Cherokee	Version 0.99.43
Cherokee Project Cherokee	Version 0.99.44
Cherokee Project Cherokee	Version 0.99.45
Cherokee Project Cherokee	Version 0.99.46
Cherokee Project Cherokee	Version 0.99.47
Cherokee Project Cherokee	Version 0.99.48
Cherokee Project Cherokee	Version 0.99.49
Cherokee Project Cherokee	Version 0.99.4
Cherokee Project Cherokee	Version 0.99.5
Cherokee Project Cherokee	Version 0.99.6
Cherokee Project Cherokee	Version 0.99.8
Cherokee Project Cherokee	Version 0.99.9
Cherokee Project Cherokee	Version 1.0.0
Cherokee Project Cherokee	Version 1.0.10
Cherokee Project Cherokee	Version 1.0.11
Cherokee Project Cherokee	Version 1.0.12
Cherokee Project Cherokee	Version 1.0.13
Cherokee Project Cherokee	Version 1.0.14
Cherokee Project Cherokee	Version 1.0.15
Cherokee Project Cherokee	Version 1.0.16
Cherokee Project Cherokee	Version 1.0.17
Cherokee Project Cherokee	Version 1.0.18
Cherokee Project Cherokee	Version 1.0.19
Cherokee Project Cherokee	Version 1.0.1
Cherokee Project Cherokee	Version 1.0.20
Cherokee Project Cherokee	Version 1.0.2
Cherokee Project Cherokee	Version 1.0.3
Cherokee Project Cherokee	Version 1.0.4
Cherokee Project Cherokee	Version 1.0.5
Cherokee Project Cherokee	Version 1.0.6
Cherokee Project Cherokee	Version 1.0.7
Cherokee Project Cherokee	Version 1.0.8
Cherokee Project Cherokee	Version 1.0.9
Cherokee Project Cherokee	Version 1.2.0
Cherokee Project Cherokee	Version 1.2.1
Cherokee Project Cherokee	Version 1.2.2