PT-2020-20455
CVE-2020-9042
·
تاريخ النشر
2020-06-08
·
تاريخ التحديث
2020-06-11
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Couchbase Server version 6.0
Description
The issue allows credentials cached by a browser to be used for a CSRF attack if an administrator has used their browser to check the results of a REST API request.
Recommendations
For Couchbase Server version 6.0, consider implementing CSRF protection mechanisms to prevent exploitation, such as validating request headers or using tokens to verify request authenticity.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾