PT-2021-11149
CVE-2020-25562
·
تاريخ النشر
2021-08-11
·
تاريخ التحديث
2021-08-16
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
SapphireIMS version 5.0
Description:
The issue is related to the absence of a CSRF token in the entire application, which can lead to CSRF vulnerabilities in critical application forms, such as account reset.
Recommendations:
For SapphireIMS version 5.0, consider implementing CSRF tokens in all forms to prevent cross-site request forgery attacks. As a temporary workaround, restrict access to critical application forms like account reset to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾