exploitDog

CVE-2020-6844

Опубликовано: 18 фев. 2020

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts.

Ссылки

https://websec.nl/news.php
Third Party Advisory
https://www.exploit-db.com/exploits/47960
Exploit
Third Party Advisory
VDB Entry
https://websec.nl/news.php
Third Party Advisory
https://www.exploit-db.com/exploits/47960
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:topmanage:olk_webstore:2020:*:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00224

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-gv23-pf6p-p973

github

больше 3 лет назад

In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts.

EPSS

Процентиль: 45%

0.00224

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352