Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c7fp-g3rh-mvf7

Опубликовано: 16 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API.

Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API.

EPSS

Процентиль: 31%
0.00115
Низкий

8.8 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8.8
nvd
больше 2 лет назад

Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API.

EPSS

Процентиль: 31%
0.00115
Низкий

8.8 High

CVSS3

Дефекты

CWE-352