Cross site request forgery (csrf)

2020-02-2614:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

In GolfBuddy Course Manager 1.1, passwords are sent (with base64 encoding) via a GET request.

CPENameOperatorVersion
course_managereq1.1

CPE	Name	Operator	Version
	course_manager	eq	1.1

References

github.com/0xEmma/CVEs/blob/master/CVEs/CVE-2020-9337-Golf-Buddy-Insecure-Passwords.md

help.golfbuddyglobal.com/sList.asp?searchproduct=29&searchcategory=5