Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4hj4-4859-mf37

Опубликовано: 26 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Interactive Forms (IAF) in GX Software XperienCentral versions 10.31.0 until 10.33.0 was vulnerable to cross site request forgery (CSRF) because the unique token could be deduced using the names of all input fields.

Interactive Forms (IAF) in GX Software XperienCentral versions 10.31.0 until 10.33.0 was vulnerable to cross site request forgery (CSRF) because the unique token could be deduced using the names of all input fields.

EPSS

Процентиль: 35%
0.00141
Низкий

8.8 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8.8
nvd
больше 2 лет назад

Interactive Forms (IAF) in GX Software XperienCentral versions 10.31.0 until 10.33.0 was vulnerable to cross site request forgery (CSRF) because the unique token could be deduced using the names of all input fields.

EPSS

Процентиль: 35%
0.00141
Низкий

8.8 High

CVSS3

Дефекты

CWE-352