Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j3x5-v587-gpjw

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

Multiple cross-site request forgery (CSRF) vulnerabilities in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Multiple cross-site request forgery (CSRF) vulnerabilities in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

EPSS

Процентиль: 27%
0.00096
Низкий

8 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8
nvd
около 9 лет назад

Multiple cross-site request forgery (CSRF) vulnerabilities in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

EPSS

Процентиль: 27%
0.00096
Низкий

8 High

CVSS3

Дефекты

CWE-352