PT-2020-17062
CVE-2020-28931
·
تاريخ النشر
2020-12-16
·
تاريخ التحديث
2020-12-17
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
EPSON EPS TSE Server 8 version 21.0.11
Description
The issue is related to the lack of an anti-CSRF token in the administrative interface, allowing an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website.
Recommendations
For EPSON EPS TSE Server 8 version 21.0.11, consider implementing an anti-CSRF token in the administrative interface to prevent unauthorized requests. As a temporary workaround, restrict access to the administrative interface to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾