PT-2020-13286
CVE-2020-12840
·
تاريخ النشر
2020-09-24
·
تاريخ التحديث
2020-09-27
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
ismartgate PRO version 1.5.9
Description
The issue allows remote attackers to upload sound files via the "/index.php" API endpoint, potentially leading to unauthorized access or data modification.
Recommendations
For ismartgate PRO version 1.5.9, consider implementing proper CSRF protection mechanisms to prevent unauthorized requests, such as validating tokens or using same-site cookies to restrict access to the "/index.php" endpoint.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾