CVE-2023-43118

Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5…

published October 16, 2023

CVSS
—
EPSS
0%
Percentile
25.0
In the wild
Unconfirmed
What it is

Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00331 · 25.0th percentile
Published
2023-10-16T00:00Z
EPSS history
Timeline
  • 16 OCT 00:00Z
    Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5…
    cvelistv5