Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/19 12:00 a.m.•3 views

CVE-2020-27997: Cross-Site Request Forgery (CSRF)

An issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery CSRF protection may lead to elevation of privileges e.g., /admin/customer/create to create an admin account...

8.8CVSS5.8AI score0.00823EPSS
SaveExploits1References2
Rows per page
Query Builder