4 matches found
Cross site request forgery (csrf)
AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/localdel.cgi...
CVE-2015-8255
CVE-2015-8255 describes a Cross-Site Request Forgery vulnerability in AXIS Communications devices with a Web Interface. The embedded web app does not verify that a request is intentionally submitted by the user, enabling unauthorized state-changing actions. Documented impact includes CSRF-enabled...
PT-2017-7366
Name of the Vulnerable Software and Affected Versions AXIS Communications products affected versions not specified Description The issue allows for CSRF, as demonstrated by API endpoints such as "admin/pwdgrp.cgi", "vaconfig.cgi", and "admin/local del.cgi". Recommendations At the moment, there is...
