CVE-2023-43118

Cross Site Request Forgery CSRF vulnerability in Chalet application in Extreme Networks Switch Engine EXOS before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API...

CVE-2023-43118

The CVE-2023-43118 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the Chalet application of Extreme Networks Switch Engine (EXOS). Affected versions are EXOS prior to 32.5.1.5 (also listed as pre-32.5.1.5 in various sources). The underlying issue enables an attacker to execu...