Beveiligingsadvies

CVE-2017-5264

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-12-14 21:00:00
Laatst bijgewerkt 2024-08-05 14:55:35
Toegewezen door rapid7
CVSS-score geen score
Status PUBLISHED

Beschrijving

Versions of Nexpose prior to 6.4.66 fail to adequately validate the source of HTTP requests intended for the Automated Actions administrative web application, and are susceptible to a cross-site request forgery (CSRF) attack.