CVE-2014-2989: Open Assessment Technologies Tao

Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in Open Assessment Technologies TAO 2.5.6 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via a request to Users/add.

Affected products

Published 2014-05-13. Last modified 2026-06-17.