CVE-2016-4504

Name of the Vulnerable Software and Affected Versions Meteocontrol WEB'log Basic versions all Meteocontrol WEB'log Light versions all Meteocontrol WEB'log Pro versions all Meteocontrol WEB'log Pro Unlimited versions all

Description A Cross-Site Request Forgery issue was found, where no CSRF Token is generated per page or per function, allowing for potential exploitation.

Recommendations For Meteocontrol WEB'log Basic, consider implementing a CSRF token generation mechanism per page or per function as a mitigation measure. For Meteocontrol WEB'log Light, consider implementing a CSRF token generation mechanism per page or per function as a mitigation measure. For Meteocontrol WEB'log Pro, consider implementing a CSRF token generation mechanism per page or per function as a mitigation measure. For Meteocontrol WEB'log Pro Unlimited, consider implementing a CSRF token generation mechanism per page or per function as a mitigation measure.