exploitDog

CVE-2022-31886

Опубликовано: 28 июн. 2022

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

Marval MSM v14.19.0.12476 is vulnerable to Cross Site Request Forgery (CSRF). An attacker can disable the 2FA by sending the user a malicious form.

Ссылки

https://cyber-guy.gitbook.io/cyber-guy/pocs/marval-msm/2fa-bypass-via-x-csrf
Exploit
Third Party Advisory
https://drive.google.com/drive/folders/1Zy5Oa-maLo0ACfLz90uvxqxwG18DwAZY
Exploit
Third Party Advisory
https://marvalglobal.com/
Product
Vendor Advisory
https://www.servicedeskinstitute.com/casestudies/who-is-marval-software/
Third Party Advisory
https://cyber-guy.gitbook.io/cyber-guy/pocs/marval-msm/2fa-bypass-via-x-csrf
Exploit
Third Party Advisory
https://drive.google.com/drive/folders/1Zy5Oa-maLo0ACfLz90uvxqxwG18DwAZY
Exploit
Third Party Advisory
https://marvalglobal.com/
Product
Vendor Advisory
https://www.servicedeskinstitute.com/casestudies/who-is-marval-software/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:marvalglobal:marval_msm:14.19.0.12476:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.0091

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-q29g-9jh2-mxmc

CVSS3: 6.5

github

больше 3 лет назад

Marval MSM v14.19.0.12476 is vulnerable to Cross Site Request Forgery (CSRF). An attacker can disable the 2FA by sending the user a malicious form.

EPSS

Процентиль: 75%

0.0091

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352