Cross site request forgery (csrf)

2019-08-2118:15:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

In Code42 Enterprise and Crashplan for Small Business through Client version 6.9.1, an attacker can craft a restore request to restore a file through the Code42 app to a location they do not have privileges to write.

CPENameOperatorVersion
code42_for_enterprisele6.9.1
crashplan_for_small_businessle6.9.1

CPE	Name	Operator	Version
	code42_for_enterprise	le	6.9.1
	crashplan_for_small_business	le	6.9.1

References

code42.com/r/support/CVE-2019-11551