Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6mj3-q7xf-m4j8

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Cross-Site Request Forgery (CSRF) vulnerability in the /op/op.LockDocument.php in SeedDMS v5.1.x<5.1.23 and v6.0.x <6.0.16 allows a remote attacker to lock any document without victim's knowledge, by enticing an authenticated user to visit an attacker's web page.

Cross-Site Request Forgery (CSRF) vulnerability in the /op/op.LockDocument.php in SeedDMS v5.1.x<5.1.23 and v6.0.x <6.0.16 allows a remote attacker to lock any document without victim's knowledge, by enticing an authenticated user to visit an attacker's web page.

EPSS

Процентиль: 28%
0.00102
Низкий

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 4.3
nvd
больше 4 лет назад

Cross-Site Request Forgery (CSRF) vulnerability in the /op/op.LockDocument.php in SeedDMS v5.1.x<5.1.23 and v6.0.x <6.0.16 allows a remote attacker to lock any document without victim's knowledge, by enticing an authenticated user to visit an attacker's web page.

EPSS

Процентиль: 28%
0.00102
Низкий

Дефекты

CWE-352