Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rq2g-2prr-ww75

Опубликовано: 15 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS4: 8.6
CVSS3: 6.5

Описание

A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed.

A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed.

EPSS

Процентиль: 35%
0.00147
Низкий

8.6 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-346

Связанные уязвимости

CVSS3: 8.8
nvd
больше 3 лет назад

A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed.

EPSS

Процентиль: 35%
0.00147
Низкий

8.6 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-346