PT-2020-13092
CVE-2020-12281
·
تاريخ النشر
2020-09-24
·
تاريخ التحديث
2020-09-27
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
iSmartgate PRO version 1.5.9
Description
The issue allows remote attackers to create a new user via the "/index.php" API endpoint. This is achieved through a CSRF attack.
Recommendations
For iSmartgate PRO version 1.5.9, consider implementing CSRF protection measures to prevent unauthorized requests to the "/index.php" endpoint. As a temporary workaround, restrict access to the user creation functionality until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾