Cross site scripting

2020-02-1223:15:00

PRIOn knowledge base

www.prio-n.com

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.9%

JSON

Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier versions.

CPENameOperatorVersion
expedition_migration_toolge1.1
expedition_migration_toolle1.1.51

CPE	Name	Operator	Version
	expedition_migration_tool	ge	1.1
	expedition_migration_tool	le	1.1.51

References

security.paloaltonetworks.com/CVE-2020-1977

www.tenable.com/security/research/tra-2020-11