Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5grf-38mv-vxvv

Опубликовано: 05 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.4

Описание

Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 allows an attacker to reset the administrator's password. This critical security flaw can result in unauthorized access to the platform, enabling attackers to hijack admin accounts and compromise the integrity and security of the system.

Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 allows an attacker to reset the administrator's password. This critical security flaw can result in unauthorized access to the platform, enabling attackers to hijack admin accounts and compromise the integrity and security of the system.

EPSS

Процентиль: 22%
0.00074
Низкий

8.4 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8.4
nvd
больше 1 года назад

Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 allows an attacker to reset the administrator's password. This critical security flaw can result in unauthorized access to the platform, enabling attackers to hijack admin accounts and compromise the integrity and security of the system.

EPSS

Процентиль: 22%
0.00074
Низкий

8.4 High

CVSS3

Дефекты

CWE-352