Cross site request forgery (csrf)

2023-06-0722:15:00

PRIOn knowledge base

www.prio-n.com

csrf

token validation

local attacker

replay attack

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.8%

JSON

PTC Vuforia Studio does not require a token; this could allow an
attacker with local access to perform a cross-site request forgery
attack or a replay attack.

CPENameOperatorVersion
vuforia_studiolt9.9

CPE	Name	Operator	Version
	vuforia_studio	lt	9.9

References

www.cisa.gov/news-events/ics-advisories/icsa-23-131-13