Cross site request forgery (csrf)

2010-06-0316:30:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.7%

JSON

Cross-site request forgery (CSRF) vulnerability in Fujitsu e-Pares V01 L01 V01 L01, L03, L10, L20, L30, and L40 allows remote attackers to hijack the authentication of users for requests that modify “facility reservation data” via unknown vectors.

CPENameOperatorVersion
e-pareseq1.0.108
e-pareseq30.0.108
e-pareseq1.0.118
e-pareseq10.0.108
e-pareseq40.0.108
e-pareseq3.0.108
e-pareseq20.0.108

Name	Operator	Version
e-pares	eq	1.0.108
e-pares	eq	30.0.108
e-pares	eq	1.0.118
e-pares	eq	10.0.108
e-pares	eq	40.0.108
e-pares	eq	3.0.108
e-pares	eq	20.0.108

References

jvn.jp/en/jp/JVN82465391/index.html

jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000022.html

secunia.com/advisories/40029

software.fujitsu.com/jp/security/vulnerabilities/jvn-36925871-58439007-82465391.html

www.securityfocus.com/bid/40517