Lucene search
PRIOn knowledge basePRION:CVE-2020-11682HistoryJun 04, 2020 - 8:15 p.m.
Cross site request forgery (csrf)
2020-06-0420:15:00
PRIOn knowledge base
www.prio-n.com
4
Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state-changing request. A __RequestVerificationToken is set by the web interface, and included in requests sent by web interface. However, this token is not verified by the application: the token can be removed from all requests and the request will succeed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nextgen_dvr_firmware | eq | 1.0.0 |
Related
cvelist
cvelist
CVE-2020-11682
2020-06-04 19:10:00
nvd
nvd
CVE-2020-11682
2020-06-04 20:15:11
cve
cve
CVE-2020-11682
2020-06-04 20:15:11
packetstorm
packetstorm
Castel NextGen DVR 1.0.0 Bypass / CSRF / Disclosure
2020-06-05 00:00:00
zdt
zdt
Castel NextGen DVR 1.0.0 Bypass / CSRF / Disclosure Vulnerabilities
2020-06-08 00:00:00