CVE-2020-29030CWE-352
Insufficient CSRF guards
High · published March 5, 2021
What it is
Cross-Site Request Forgery (CSRF) vulnerability in web GUI of Secomea GateManager allows an attacker to execute malicious code. This issue affects: Secomea GateManager All versions prior to 9.4.
The record
Technical detail
- CVSS v3.1
- 8.1 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00519 · 43.2th percentile
- Weakness
- CWE-352 · Cross-Site Request Forgery (CSRF)
- Published
- 2021-03-05T19:15Z
EPSS history
Timeline
05 MAR 19:15Z
Insufficient CSRF guards
cvelistv5