CVE-2020-26516

A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4

published June 8, 2021

CVSS
—
EPSS
1%
Percentile
57.7
In the wild
Unconfirmed
What it is

A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. Requests sent to the server that trigger actions do not contain a CSRF token and can therefore be entirely predicted allowing attackers to cause the victim's browser to execute undesired actions in the web application through crafted requests.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00849 · 57.7th percentile
Published
2021-06-08T12:28Z
EPSS history
Timeline
  • 08 JUN 12:28Z
    A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4
    cvelistv5