CVE-2018-14930

Name of the Vulnerable Software and Affected Versions Polaris FT Intellect Core Banking version 9.7.1

Description An issue was discovered in the Armor module, allowing CSRF to occur via the "/CollatWebApp/gcmsRefInsert?name=SUPP" URI.

Recommendations For Polaris FT Intellect Core Banking version 9.7.1, consider implementing CSRF protection mechanisms to prevent exploitation. As a temporary workaround, restrict access to the "/CollatWebApp/gcmsRefInsert?name=SUPP" URI to minimize the risk of exploitation.