Описание
A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as problematic. This vulnerability affects unknown code of the file /note/index/delete. The manipulation of the argument id leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-230458 is the identifier assigned to this vulnerability.
Ссылки
- ExploitThird Party Advisory
- Permissions Required
- Third Party Advisory
- ExploitThird Party Advisory
- Permissions Required
- Third Party Advisory
Уязвимые конфигурации
EPSS
4.3 Medium
CVSS3
8.8 High
CVSS3
5 Medium
CVSS2
Дефекты
Связанные уязвимости
A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as problematic. This vulnerability affects unknown code of the file /note/index/delete. The manipulation of the argument id leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-230458 is the identifier assigned to this vulnerability.
EPSS
4.3 Medium
CVSS3
8.8 High
CVSS3
5 Medium
CVSS2