CVE-2020-10229

Опубликовано: 14 сент. 2020

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting accounts.

Ссылки

https://sourceforge.net/projects/vtecrm/
Product
Third Party Advisory
https://vtenext.com/en/
Product
Vendor Advisory
https://www.exploit-db.com/exploits/48804
Exploit
Third Party Advisory
VDB Entry
https://sourceforge.net/projects/vtecrm/
Product
Third Party Advisory
https://vtenext.com/en/
Product
Vendor Advisory
https://www.exploit-db.com/exploits/48804
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:vtenext:vtenext:19:*:*:*:community:*:*:*

EPSS

Процентиль: 60%

0.00397

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-368p-hj7r-f6v7

github

больше 3 лет назад