CVE-2009-2005: Dokeos

Medium severity, CVSS 6.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors.

Affected products

• Dokeos Dokeos: version 1.8.5 only

Published 2009-06-08. Last modified 2026-06-16.