CVE-2022-35656CWE-352

Pega Platform from 8.3 to 8.7.3 vulnerability may allow authenticated security administrators to alter CSRF settings directly

Medium · published August 22, 2022

CVSS v3.0
6.8
EPSS
0%
Percentile
25.2
In the wild
Unconfirmed
What it is

Pega Platform from 8.3 to 8.7.3 vulnerability may allow authenticated security administrators to alter CSRF settings directly.

The record
Technical detail
CVSS v3.0
6.8 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.2th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-08-22T14:47Z
EPSS history
Timeline
  • 22 AUG 14:47Z
    Pega Platform from 8.3 to 8.7.3 vulnerability may allow authenticated security administrators to alter CSRF settings directly
    cvelistv5