CVE-2009-1455: Andrew Simpson Webcollab

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in WebCollab before 2.50 (aka Billy Goat) allow remote attackers to hijack the authentication of administrators for requests that change an arbitrary password or have other unspecified impact.

Affected products

• Andrew Simpson Webcollab: version 2.20 only; version 2.30 only; version 2.31 only; version 2.40 only

Published 2009-04-28. Last modified 2026-06-16.