Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-61449
HistoryApr 01, 2022 - 12:00 a.m.

Firmware Analysis and Comparison Tool跨站请求伪造漏洞

2022-04-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
17
firmware analysis
fact
v3.2
cross-site request forgery
vulnerability
web application
administrator action
security council (cnvd)

EPSS

0.001

Percentile

43.4%

Firmware Analysis and Comparison Tool (FACT) is a firmware analysis and comparison tool. firmware Analysis and Comparison Tool version v3.2 contains a cross-site request forgery vulnerability that stems from a WEB application that does not adequately validate that the request is from a trusted user. An attacker could use this vulnerability to forge a malicious request to log in an administrator click to perform a sensitive action.

EPSS

0.001

Percentile

43.4%

Related for CNVD-2022-61449