CVE-2019-3959

2019-07-3118:15:11

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.8%

JSON

Cross-site request forgery in WallacePOS 1.4.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.

CPENameOperatorVersion
wallaceposeq1.4.0
wallaceposeq1.1
wallaceposeq1.4.3
wallaceposeq1.4.1
wallaceposeq1.2
wallaceposeq1.3

Name	Operator	Version
wallacepos	eq	1.4.0
wallacepos	eq	1.1
wallacepos	eq	1.4.3
wallacepos	eq	1.4.1
wallacepos	eq	1.2
wallacepos	eq	1.3

References

www.tenable.com/security/research/tra-2019-37