CVE-2020-24984

Name of the Vulnerable Software and Affected Versions: Quadbase EspressReports ES version 7 Update 9

Description: An issue allows Cross-Site Request Forgery (CSRF), whereby an attacker may trick an authenticated admin-level user into uploading malicious files to the web server.

Recommendations: For Quadbase EspressReports ES version 7 Update 9, consider implementing CSRF protection mechanisms, such as token-based validation, to prevent malicious file uploads. As a temporary workaround, restrict access to file upload functionality for admin-level users until a patch is available.