Input validation

2019-12-3115:15:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.0%

JSON

DISPUTED OutSystems Platform 10 through 11 allows ImageResourceDetail.aspx CSRF for content modifications and file uploads. NOTE: The product is self-hosted by the customer, even though it has a *.outsystemsenterprise.com domain name.) NOTE: The vendor claims that the independent researcher created the report without any type of validation and that no such vulnerability exists.

CPENameOperatorVersion
outsystemsge10
outsystemsle11

CPE	Name	Operator	Version
	outsystems	ge	10
	outsystems	le	11

References

cxsecurity.com/issue/WLB-2019050242