PT-2017-7645

CVE-2016-0720

Publicado

2016-11-03

Atualizado

2023-02-12

Descrição por

CVSS 3.1

8.8

Alta

MétricasAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions pcsd versions prior to 0.9.149

Description The issue is related to a cross-site request forgery (CSRF) vulnerability in the pcsd web UI. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.

Recommendations For versions prior to 0.9.149, update to version 0.9.149 or later to resolve the issue.

Explorabilidade

Correção

Impactos

Pesquisadores

Martin Prpič

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-352: Cross-Site Request Forgery (CSRF)

Identificadores relacionados

CVE-2016-0720