CVE-2022-43710

2023-07-2600:00:00

mitre

www.cve.org

cve-2022-43710

cross site request forgery

vulnerability

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

27.2%

JSON

Interactive Forms (IAF) in GX Software XperienCentral versions 10.31.0 until 10.33.0 was vulnerable to cross site request forgery (CSRF) because the unique token could be deduced using the names of all input fields.

References

service.gxsoftware.com

service.gxsoftware.com/hc/nl/articles/12208173122461