CVE-2023-50349

HCL Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability

Medium · published February 9, 2024

CVSS v3.1
5.9
EPSS
0%
Percentile
14.4
In the wild
Unconfirmed
What it is

Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability. Some REST APIs in the Sametime Proxy application can allow an attacker to perform malicious actions on the application.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00241 · 14.4th percentile
Published
2024-02-09T20:15Z
EPSS history
Timeline
  • 09 FEB 20:15Z
    HCL Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability
    cvelistv5