CVE-2022-47559 Cross-Site Request Forgery in Ormazabal products

Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to execute malicious actions when a user is logged in, affecting availability, privacy and integrity...

CVE-2022-47559

CVE-2022-47559 affects Ormazabal ekorCCP and ekorRCI with a lack of device control over web requests, enabling an attacker to craft requests that can execute malicious actions when a logged-in user is targeted. The vulnerability is described as a Cross‑Site Request Forgery (CSRF) issue impacting ...

CVE-2022-47559 Cross-Site Request Forgery in Ormazabal products

Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to execute malicious actions when a user is logged in, affecting availability, privacy and integrity...