CVE-2020-1977CWE-352

Expedition Migration Tool: Insufficient Cross Site Request Forgery protection.

High · published February 12, 2020

CVSS v3.1
7.5
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier versions.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00510 · 42.6th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2020-02-12T22:57Z
EPSS history
Timeline
  • 12 FEB 22:57Z
    Expedition Migration Tool: Insufficient Cross Site Request Forgery protection.
    cvelistv5