PT-2017-7645

CVE-2016-0720

Published

2016-11-03

Updated

2023-02-12

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions pcsd versions prior to 0.9.149

Description The issue is related to a cross-site request forgery (CSRF) vulnerability in the pcsd web UI. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.

Recommendations For versions prior to 0.9.149, update to version 0.9.149 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Martin Prpič

Vendors

Affected products

Weakness enumeration

CWE-352: Cross-Site Request Forgery (CSRF)

Related identifiers

CVE-2016-0720