CVE-2009-2005: Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attack...

Security readout for executives and security teams

CVE-2009-2005 is a CSRF issue in Dokeos 1.8.5 and possibly earlier. An attacker could trick an authenticated user into adding personal agenda items without the user intending it. The cited record does not show code execution, data theft, or confirmed active exploitation. Exposure is most likely where legacy Dokeos 1.8.5 or older instances remain accessible to authenticated users, especially internet-facing learning portals. Organizations not running Dokeos, or running a version outside the cited range, are unlikely to be affected based on the supplied sources. Treat this as a legacy-platform hygiene issue unless affected Dokeos systems are still in production. Prioritize inventory and upgrade decisions over emergency response, because the documented impact is limited and active exploitation is not supported by the provided sources. Mitigation focus: Identify any Dokeos deployments and confirm exact versions.; Check Dokeos security guidance for supported upgrade or remediation instructions.; Retire or replace unsupported Dokeos 1.8.x systems where possible..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.