PT-2019-18511 · Prima Systems · Flexair
CVE-2019-7281
·
Published
2019-07-01
·
Updated
2022-10-25
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Prima Systems FlexAir versions 2.3.38 and prior
Description
The issue allows an unauthenticated user to send unverified HTTP requests. This may enable an attacker to perform certain actions with administrative privileges if a logged-in user visits a malicious website.
Recommendations
For versions 2.3.38 and prior, update to a version later than 2.3.38 to resolve the issue.
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Flexair