الباحثون
رجوع
Nopesled
#45741
من 60,596
6.8
إجمالي CVSS
الثغرات
·
1
PT-2014-6069
2014-07-03
6.8
CVE-2014-4716
Thomson
Thomson Twg87Ouir
A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of victims for requests that change passwords. This is done via the `Password` and `PasswordReEnter` parameters to the "goform/RgSecurity" API endpoint.