PT-2019-18511 · Prima Systems · Flexair
CVE-2019-7281
·
Publicado
2019-07-01
·
Atualizado
2022-10-25
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Prima Systems FlexAir versions 2.3.38 and prior
Description
The issue allows an unauthenticated user to send unverified HTTP requests. This may enable an attacker to perform certain actions with administrative privileges if a logged-in user visits a malicious website.
Recommendations
For versions 2.3.38 and prior, update to a version later than 2.3.38 to resolve the issue.
Correção
CSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Flexair