Lucene search
K

7 matches found

BDU FSTEC
BDU FSTEC
added 2024/02/06 12:0 a.m.1 views

The vulnerability of the XWiki platform, a collaborative web application, lies in the insufficient verification of the authenticity of executed requests. This allows attackers to replace the displayed URLs with fake ones.

The vulnerability of the XWiki Platform lies in the insufficient verification of the authenticity of the requests being executed. Exploiting this vulnerability could allow a malicious actor to substitute the displayed URL with another one...

10CVSS7.6AI score0.0389EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/23 12:0 a.m.1 views

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the insufficient verification of the authenticity of executed requests, allowing an attacker to carry out a CSRF attack.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

7.8CVSS6.5AI score0.00239EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:0 a.m.1 views

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in its insufficient verification of the authenticity of executed requests. This allows attackers to compromise the integrity of the protected information.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software lies in the insufficient verification of the authenticity of executed requests. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the integrity of the protected information...

7.8CVSS5.3AI score0.00248EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/09/16 12:0 a.m.1 views

The vulnerability of the Symfony software platform for developing and managing web applications lies in the insufficient validation of the authenticity of executed requests, allowing attackers to carry out CSRF attacks.

The vulnerability of the Symfony software platform for developing and managing web applications is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

9.3CVSS7.5AI score0.00173EPSS
Exploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/09/12 12:0 a.m.1 views

The vulnerability of the Controller File System Handler component of the Jenkins OpenShift Deployer Plugin allows a perpetrator to perform arbitrary actions on a vulnerable device.

The vulnerability of the Controller File System Handler component in the Jenkins OpenShift Deployer Plugin is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable device b...

5CVSS6.8AI score0.00116EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/01/29 12:0 a.m.2 views

Vulnerability of Cisco IOS XE and Cisco IOS web interfaces, allowing attackers to perform cross-site forgery attacks

The vulnerability in Cisco IOS XE and Cisco IOS web interfaces is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to perform cross-site forgery of requests remotely...

10CVSS7.4AI score0.02786EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/05/16 12:0 a.m.3 views

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software lies in the insufficient verification of the authenticity of executed requests. This allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software is related to insufficient verification of the authenticity of the requests being executed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using...

9.4CVSS8AI score0.00248EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder