CVE-2019-13071

Опубликовано: 10 июл. 2019

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

CSRF in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows an attacker to submit POST requests to any forms in the web application. This can be exploited by tricking an authenticated user into visiting an attacker controlled web page.

Ссылки

http://packetstormsecurity.com/files/153581/PowerPanel-Business-Edition-3.4.0-Cross-Site-Request-Forgery.html
Exploit
Third Party Advisory
http://seclists.org/fulldisclosure/2019/Jul/11
Exploit
Mailing List
Third Party Advisory
http://packetstormsecurity.com/files/153581/PowerPanel-Business-Edition-3.4.0-Cross-Site-Request-Forgery.html
Exploit
Third Party Advisory
http://seclists.org/fulldisclosure/2019/Jul/11
Exploit
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cyberpowersystems:powerpanel:3.4.0:*:*:*:business:*:*:*

EPSS

Процентиль: 55%

0.0033

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-qpxq-p6g3-x26q