PT-2023-30791 · Unknown · Mike Strand Bulk Comment Remove

·

CVE-2023-48330

·

Publicado

2023-11-30

·

Atualizado

2023-12-05

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Mike Strand Bulk Comment Remove versions prior to 2
Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is achieved by tricking the user into performing an unintended action on the web application. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.
Recommendations For versions prior to 2, update to version 2 or later to resolve the issue. As a temporary workaround, consider implementing additional validation checks for requests to prevent unauthorized actions. Restrict access to sensitive functionality to minimize the risk of exploitation.

Correção

CSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-48330

Produtos afetados

Mike Strand Bulk Comment Remove