CVE-2017-20045CWE-352

Navetti PricePoint cross-site request forgery

High · published June 13, 2022

CVSS v3.1
7.3
EPSS
0%
Percentile
39.9
In the wild
Unconfirmed
What it is

A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.7.0.0 is able to address this issue. It is recommended to upgrade the affected component.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00477 · 39.9th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-06-13T06:50Z
EPSS history
Timeline
  • 13 JUN 06:50Z
    Navetti PricePoint cross-site request forgery
    cvelistv5