Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-43118
HistoryOct 16, 2023 - 12:00 a.m.

CVE-2023-43118

2023-10-1600:00:00
mitre
github.com
cve-2023-43118
cross site request forgery
chalet application
extreme networks switch engine
jsonrpc api
arbitrary code

AI Score

7.6

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API.

AI Score

7.6

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2023-43118