Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3394-4x69-rcm8

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Canon Oce Colorwave 500 4.0.0.0 printer's web application is missing any form of CSRF protections. This is a system-wide issue. An attacker could perform administrative actions by targeting a logged-in administrative user. NOTE: this is fixed in the latest version.

The Canon Oce Colorwave 500 4.0.0.0 printer's web application is missing any form of CSRF protections. This is a system-wide issue. An attacker could perform administrative actions by targeting a logged-in administrative user. NOTE: this is fixed in the latest version.

EPSS

Процентиль: 40%
0.00182
Низкий

Связанные уязвимости

CVSS3: 8.8
nvd
почти 6 лет назад

The Canon Oce Colorwave 500 4.0.0.0 printer's web application is missing any form of CSRF protections. This is a system-wide issue. An attacker could perform administrative actions by targeting a logged-in administrative user. NOTE: this is fixed in the latest version.

EPSS

Процентиль: 40%
0.00182
Низкий