CVE-2012-3343

2022-10-0316:15:24

mitre

www.cve.org

cross-site request forgery

microdasys

bloxx web filtering

remote attackers

user authentication

6.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.7%

JSON

Cross-site request forgery (CSRF) vulnerability in Microdasys before 3.5.1-B708, as used in Bloxx Web Filtering before 5.0.14 and other products, allows remote attackers to hijack the authentication of arbitrary users for requests that trigger error pages containing XSS sequences, a different vulnerability than CVE-2012-2564.