PT-2021-11451
CVE-2020-28149
·
تاريخ النشر
2021-03-15
·
تاريخ التحديث
2021-03-24
الوصف من
CVSS 3.1
9.6
حرجةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
myDBR version 5.8.3/4262
Description:
The issue allows for Cross Site Scripting (XSS) with the impact of executing arbitrary code remotely. The component affected is the CSRF Token, and the attack vector involves CSRF token injection to achieve XSS.
Recommendations:
For myDBR version 5.8.3/4262, consider disabling the CSRF Token component temporarily until a patch is available to prevent CSRF token injection and potential XSS attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾