Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mh6w-83mx-cmc6

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the central phone server for the Snom 320 SIP Phone allow remote attackers to perform actions as the phone user, as demonstrated by inserting an address-book entry containing an XSS sequence.

Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the central phone server for the Snom 320 SIP Phone allow remote attackers to perform actions as the phone user, as demonstrated by inserting an address-book entry containing an XSS sequence.

EPSS

Процентиль: 54%
0.00308
Низкий

Дефекты

CWE-352

Связанные уязвимости

nvd
почти 18 лет назад

Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the central phone server for the Snom 320 SIP Phone allow remote attackers to perform actions as the phone user, as demonstrated by inserting an address-book entry containing an XSS sequence.

EPSS

Процентиль: 54%
0.00308
Низкий

Дефекты

CWE-352