PT-2024-37152
CVE-2024-5786
·
تاريخ النشر
2024-06-10
·
تاريخ التحديث
2024-06-10
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
Comtrend router WLD71-T1 version 2.0.201820
Comtrend router GRG-4280us version
Description:
The issue allows an attacker to force an end user to execute unwanted actions in a web application to which he is authenticated. This is a Cross-Site Request Forgery vulnerability.
Recommendations:
For Comtrend router WLD71-T1 version 2.0.201820, update to a version that includes a fix for this issue.
For Comtrend router GRG-4280us, update to a version that includes a fix for this issue.
As a temporary workaround, consider implementing measures to prevent cross-site request forgery, such as validating requests and using anti-CSRF tokens.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾