CVE-2023-28335

Summary

The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk.

Affected Software

VendorProductVersion RangeStatus
4.1.0 < 4.1.2affected

Weaknesses

  • CWE-352: Cross-Site Request Forgery (CSRF)

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

CVE Program Container

Additional References

References