Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cwr4-4jj2-mpc2

Опубликовано: 17 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

A Cross-Site Request Forgery (CSRF) in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform sensitive requests in some admin screens.

A Cross-Site Request Forgery (CSRF) in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform sensitive requests in some admin screens.

EPSS

Процентиль: 35%
0.00143
Низкий

8 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8
nvd
около 1 года назад

A Cross-Site Request Forgery (CSRF) in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform sensitive requests in some admin screens.

EPSS

Процентиль: 35%
0.00143
Низкий

8 High

CVSS3

Дефекты

CWE-352