CVE-2019-5430CWE-352

In UniFi Video 3.10.0 and prior, due to the lack of CSRF protection, it is possible to abuse the Web API to make changes on the server configuration without…

published May 6, 2019

CVSS
—
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

In UniFi Video 3.10.0 and prior, due to the lack of CSRF protection, it is possible to abuse the Web API to make changes on the server configuration without the user consent, requiring the attacker to lure an authenticated user to access on attacker controlled page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00709 · 53.0th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2019-05-06T16:53Z
EPSS history
Timeline
  • 06 MAY 16:53Z
    In UniFi Video 3.10.0 and prior, due to the lack of CSRF protection, it is possible to abuse the Web API to make changes on the server configuration without…
    cvelistv5