Lucene search
HistoryNov 30, 2023 - 2:15 p.m.
CVE-2023-36682
cve-2023-36682
brainstorm force us llc
schema pro
csrf
cross-site request forgery
nvd
vulnerability
security
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
24.3%
Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force US LLC Schema Pro allows Cross Site Request Forgery.This issue affects Schema Pro: from n/a through 2.7.7.
Affected configurations
Node
brainstorm_force_us_llcschema_proRange≤2.7.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| brainstormforce:schema_pro | brainstormforce schema pro | lt | 2.7.8 |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Schema Pro",
"vendor": "Brainstorm Force US LLC",
"versions": [
{
"changes": [
{
"at": "2.7.8",
"status": "unaffected"
}
],
"lessThanOrEqual": "2.7.7",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2023-36682
2023-11-30 14:15:09
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2023-11-30 14:15:00
wordfence
wordfence
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
24.3%
Related for CVE-2023-36682