Cross site request forgery (csrf)

2019-09-0619:15:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.9%

JSON

Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page.

CPENameOperatorVersion
sentrifugoeq3.2

CPE	Name	Operator	Version
	sentrifugo	eq	3.2

References

www.sevenlayers.com/index.php/246-sentrifugo-3-2-csrf