CVE-2008-0556: Openca Pki

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in OpenCA PKI 0.9.2.5, and possibly earlier versions, allows remote attackers to perform unauthorized actions as authorized users via a link or IMG tag to RAServer.

Affected products

• Openca Openca Pki: up to and including 0.9.2.5

Published 2008-02-19. Last modified 2026-06-16.