Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-12257
HistoryMay 18, 2020 - 2:15 p.m.

Cross site request forgery (csrf)

2020-05-1814:15:00
PRIOn knowledge base
www.prio-n.com
3

8.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.2%

rConfig 3.9.4 is vulnerable to cross-site request forgery (CSRF) because it lacks implementation of CSRF protection such as a CSRF token. An attacker can leverage this vulnerability by creating a form (add a user, delete a user, or edit a user).

CPENameOperatorVersion
rconfigeq3.9.4

8.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.2%

Related for PRION:CVE-2020-12257