PT-2021-11451
CVE-2020-28149
·
Published
2021-03-15
·
Updated
2021-03-24
Description by
CVSS 3.1
9.6
CriticalMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
myDBR version 5.8.3/4262
Description:
The issue allows for Cross Site Scripting (XSS) with the impact of executing arbitrary code remotely. The component affected is the CSRF Token, and the attack vector involves CSRF token injection to achieve XSS.
Recommendations:
For myDBR version 5.8.3/4262, consider disabling the CSRF Token component temporarily until a patch is available to prevent CSRF token injection and potential XSS attacks.
Found an issue in the description? Have something to add? Feel free to write us 👾