Cross site request forgery (csrf)

2020-09-2416:15:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.3%

JSON

iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. (This can be combined with reflected XSS.)

CPENameOperatorVersion
ismartgate_pro_firmwareeq1.5.9

CPE	Name	Operator	Version
	ismartgate_pro_firmware	eq	1.5.9

References

ismartgate.com/secure-garage-door/

kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf