CVE-2023-4837CWE-352

Cross-site request forgery (CSRF) in SmodBIP

High · published October 10, 2023

CVSS v3.1
8.8
EPSS
0%
Percentile
31.4
In the wild
Unconfirmed
What it is

SmodBIP is vulnerable to Cross-Site Request Forgery, that could be used to induce logged in users to perform unintended actions, including creation of additional accounts with administrative privileges.

This issue affects all versions of SmodBIP. SmodBIP is no longer maintained and the vulnerability will not be fixed.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00386 · 31.4th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2023-10-10T09:20Z
EPSS history
Timeline
  • 10 OCT 09:20Z
    Cross-site request forgery (CSRF) in SmodBIP
    cvelistv5