CVE-2021-47723CWE-352

STVS ProVision Cross-Site Request Forgery (Add Admin)

Medium · published December 9, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
9.2
In the wild
Unconfirmed
What it is

STVS ProVision 5.9.10 contains a cross-site request forgery vulnerability that allows attackers to perform actions with administrative privileges by exploiting unvalidated HTTP requests. Attackers can visit malicious web sites to trigger the forge request, allowing them to create new admin users.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00199 · 9.2th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2025-12-09T20:41Z
EPSS history
Timeline
  • 09 DEC 20:41Z
    STVS ProVision Cross-Site Request Forgery (Add Admin)
    cvelistv5