Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pcmg-wjrm-9r44

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website.

Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website.

EPSS

Процентиль: 60%
0.00403
Низкий

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8.8
nvd
около 5 лет назад

Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website.

EPSS

Процентиль: 60%
0.00403
Низкий

Дефекты

CWE-352